HubSpot

Records8All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high3CVSS 7.0–8.9

Exploited now

HubSpot records in CISA KEV

No HubSpot vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

4 records in Jinjava · all components

TI-2025-36901 CVE-2025-59340 · GHSA-m49c-g9wr-hv6v

MEDIUM 53

jinjava is a Java-based template engine based on django template syntax, adapted to render jinja templates.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.02185 Published 2025-09-17 Fixed in 2.8.1, 2.7.5 CWE-1336

TI-2026-20635 CVE-2026-25526 · GHSA-gjx9-j8f8-7j74

MEDIUM 51

JinJava is a Java-based template engine based on django template syntax, adapted to render jinja templates.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00966 Published 2026-02-04 Fixed in 2.7.6, 2.8.3 CWE-1336

TI-2020-10073 CVE-2020-12668 · GHSA-2hjr-fg6c-v2h6

LOW 32

Jinjava before 2.5.4 allow access to arbitrary classes by calling Java methods on objects passed into a Jinjava context.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01814 Published 2021-02-19 Fixed in 2.5.4 CWE-863

TI-2018-13389 CVE-2018-18893 · GHSA-45r8-3495-x6rm

LOW 28

Jinjava before 2.4.6 does not block the getClass method, related to com/hubspot/jinjava/el/ext/JinjavaBeanELResolver.java.

CVSS 3.0MEDIUM 5.3 Network No auth No interaction EPSS 0.01829 Published 2019-01-03 Fixed in 2.4.6