TI-2025-20348 CVE-2025-27516 · GHSA-cpwx-vrp4-4pq7
Jinja sandbox breakout through attr filter selecting format method
Priority LOW 27
Jinja is an extensible templating engine.
RHSA-2025:3622
python-jinja2 security update
Released 2025-04-07 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream AUS (v.8.6) python-jinja2-2.10.1-4.el8_6.2, python3-jinja2-2.10.1-4.el8_6.2
- Red Hat Enterprise Linux AppStream E4S (v.8.6) python-jinja2-2.10.1-4.el8_6.2, python3-jinja2-2.10.1-4.el8_6.2
- Red Hat Enterprise Linux AppStream TUS (v.8.6) python-jinja2-2.10.1-4.el8_6.2, python3-jinja2-2.10.1-4.el8_6.2