120 matches found
aboutcode-toolkit (>=3.0.0, <=5.1.0), abracadabra (>=0.0.6, <=0.0.7) +1720 more potentially affected by CVE-2024-22195 via jinja2 (2.11.3)
jinja2 PYPI version 2.11.3 is affected by a known vulnerability. The following packages have a transitive dependency on jinja2 and may be impacted: - aboutcode-toolkit =3.0.0, =0.0.6, =0.8.44.4rc1, =0.1.0rc3, =1.1.5, =0.1.0, =0.1.0a0, =0.1.0a0, =1.2.0a1, =2.0.0, =0.1.0, =1.1.0, =1.6.9 and more...
ansible-gen (0.5.2), auto-white-reimu (0.1.4) +9 more potentially affected by CVE-2024-22195 via jinja2 (2.11.0)
jinja2 PYPI version 2.11.0 is affected by a known vulnerability. The following packages have a transitive dependency on jinja2 and may be impacted: - ansible-gen 0.5.2 - auto-white-reimu 0.1.4 - cookiecutter 1.7.1 - mlops-generator =0.1.1, =0.1.0, =0.1.3, =0.0.0.1, =0.0.1 Source cves:...
abracadabra (>=0.0.0, <=0.0.5), activedirectoryenum (0.5.0) +255 more potentially affected by CVE-2024-22195 via jinja2 (2.11.2)
jinja2 PYPI version 2.11.2 is affected by a known vulnerability. The following packages have a transitive dependency on jinja2 and may be impacted: - abracadabra =0.0.0, =1.0.0, =0.2.0, =0.6.2, =3.4.0, =0.1.0, =0.1.0.dev1, =5.2.15, =1.1.1, =1.5.0, =1.0.0, =1.0.1 and more Source cves: CVE-2024-221...
activedirectoryenum (>=0.4.0, <=0.4.9), agavepy (>=1.0.0a4, <=1.0.0a5) +82 more potentially affected by CVE-2024-22195 via jinja2 (2.11.1)
jinja2 PYPI version 2.11.1 is affected by a known vulnerability. The following packages have a transitive dependency on jinja2 and may be impacted: - activedirectoryenum =0.4.0, =1.0.0a4, =0.1.2, =0.0.27, =4.0.4, =0.3.0, =1.3.1, =1.2.3, =0.1.0, =0.1.0rc1, =1.2.0, =0.0.1, =0.2.1 and more Source...
aiolambda (>=0.2.0, <=0.3.0), alcazar-web-framework (0.0.2) +155 more potentially affected by CVE-2024-22195 via jinja2 (2.10.0)
jinja2 PYPI version 2.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on jinja2 and may be impacted: - aiolambda =0.2.0, =1.10.3b1, =3.0.0b4, =0.1.0, =0.0.1, =0.2.0, =0.6.7.post3, =0.7.1, =0.1.1, =1.2.1, =0.0.2, =0.0.3 - burl 1.0.0 and more Source...
crossbar (17.3.1), esrally (>=0.5.0, <=1.0.4) +9 more potentially affected by CVE-2024-22195 via jinja2 (2.9.5)
jinja2 PYPI version 2.9.5 is affected by a known vulnerability. The following packages have a transitive dependency on jinja2 and may be impacted: - crossbar 17.3.1 - esrally =0.5.0, =0.2.0, =0.2.0, =0.5.0, =1.1.3.0, =1.0.2, =0.0.0, =0.9.14, =0.2.3, =0.1.1, =0.4.4 Source cves: CVE-2024-22195 Sour...
afterburner (>=0.0.1, <=0.0.2), agwui (>=0.0.3, <=0.0.6) +205 more potentially affected by CVE-2024-22195 via jinja2 (2.10.3)
jinja2 PYPI version 2.10.3 is affected by a known vulnerability. The following packages have a transitive dependency on jinja2 and may be impacted: - afterburner =0.0.1, =0.0.3, =2022.9.19, =0.5.1, =1.0.0, =0.0.2, =3.2.0, =1.10.4b2, =0.0.3rc1, =0.0.0, =2.0.0 and more Source cves: CVE-2024-22195...
MiracleLinux 9 : python-jinja2-2.11.3-5.el9 (AXSA:2024-7960:01)
The remote MiracleLinux 9 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2024-7960:01 advisory. jinja2: HTML attribute injection when passing user input as keys to xmlattr filter CVE-2024-22195 Tenable has extracted the preceding description block...
Linux Distros Unpatched Vulnerability : CVE-2024-22195
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Jinja is an extensible templating engine. Special placeholders in the template allow writing code similar to Python syntax. It is possible to inject arbitrary...
Security Bulletin: IBM Storage Ceph is vulnerable to Cross-site Scripting in Jinja2 (CVE-2024-22195)
Summary Jinja2 is used by IBM Storage Ceph and by the RHEL UBI in multiple components. CVE-2024-22195 This bulletin identifies the steps to take to address the vulnerability in Jinja2. Affected components include nvme, grafana, keepalived, haproxy, promtail. snmp, ansible, fence-agents, rust...
Security Bulletin: Vulnerability in jinja2 affects IBM Cloud Pak for Data System 2.0 (CPDS 2.0) [CVE-2024-22195]
Summary The jinja2 package is used by IBM Cloud Pak for Data System 2.0 . IBM Cloud Pak for Data System 2.0 has addressed the applicable CVEs CVE-2024-22195 Vulnerability Details CVEID:CVE-2024-22195 DESCRIPTION: Jinja is an extensible templating engine. Special placeholders in the template allow...
TencentOS Server 3: python27:2.7 (TSSA-2024:0777)
The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2024:0777 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities...
TencentOS Server 3: python-jinja2 (TSSA-2024:0203)
The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2024:0203 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:...
Alibaba Cloud Linux 3 : 0139: python-jinja2 (ALINUX3-SA-2024:0139)
The remote Alibaba Cloud Linux 3 host has packages installed that are affected by a vulnerability as referenced in the ALINUX3-SA-2024:0139 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2024-22195: Jinja is an extensible templating...
Security Bulletin: Vulnerability in Jinja2 affects IBM Cloud Pak for Data System 1.0(CPDS 1.0)[CVE-2024-22195].
Summary The Jinja2 package is used by IBM Cloud Pak for Data System 1.0. IBM Cloud Pak for Data System 1.0 has addressed the applicable CVE CVE-2024-22195. Vulnerability Details CVEID:CVE-2024-22195 DESCRIPTION: Jinja is an extensible templating engine. Special placeholders in the template allow...
CVE-2024-22195 affecting package nodejs18 for versions less than 18.20.3-3
CVE-2024-22195 affecting package nodejs18 for versions less than 18.20.3-3. A patched version of the package is available...
CVE-2024-22195 affecting package nodejs for versions less than 20.14.0-1
CVE-2024-22195 affecting package nodejs for versions less than 20.14.0-1. A patched version of the package is available...
Azure Linux 3.0 Security Update: python-jinja2 (CVE-2024-22195)
The version of python-jinja2 installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-22195 advisory. - Jinja is an extensible templating engine. Special placeholders in the template allow writing code...
Security update for python-Jinja2
This update for python-Jinja2 fixes the following issues: CVE-2024-34064, CVE-2024-22195: HTML attribute injection when passing user input as keys to xmlattr filter bsc1223980, bsc1218722 Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST...