Skip to content

PatchFirst · Latest vulnerabilities

jinja2 vulnerabilities

Vulnerabilities published for jinja2 in the last 30 days: 0. Listed in the KEV catalogue: 0.

RSS ↗ JSON ↗

Vulnerabilities: 2

CVE-2016-10745
High · CVSS 8.6EPSS 3.52%Fix available
CVE-2016-10745
In Pallets Jinja before 2.8.1, str.format allows a sandbox escape.
jinja2 Operating systems
- Update to 2.8-1ubuntu0.1
Published April 8, 2019Updated August 6, 2024
Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗
CVE-2019-10906
High · CVSS 8.6EPSS 3.53%Fix available
CVE-2019-10906
In Pallets Jinja before 2.10.1, str.format_map allows a sandbox escape.
jinja2 Operating systems
- Update to 2.8-1ubuntu0.1
Published April 6, 2019Updated August 4, 2024
Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

Check your server

Check your installed stack and versions against the current vulnerability feeds.

Check your server →