Photon OS 5.0: Python3 PHSA-2025-5.0-91-0515

An update of the python3 package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-5.0-91-0515. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

ROOT-APP-PYPI-CVE-2024-56326 CVE-2024-56326 in Jinja2 - Patched by Root

Root has patched CVE-2024-56326 in the Jinja2 package for Root:PyPI. Multiple fixed versions available...

3di-cmd-client (>=0.0.1a0, <=0.0.3), alarmageddon (>=1.1.1, <=1.1.2) +127 more potentially affected by CVE-2024-56326 via jinja2 (2.10.1)

jinja2 PYPI version 2.10.1 is affected by a known vulnerability. The following packages have a transitive dependency on jinja2 and may be impacted: - 3di-cmd-client =0.0.1a0, =1.1.1, =0.1.0, =3.0.5, =0.0.14, =0.1.26, =0.0.21, =0.0.5a0, =0.0.12, =0.0.1, =0.3.4, =0.3.8 and more Source cves:...

a-api-server (1.3.0), aau-ais-dipaal (>=0.1.22, <=0.1.29) +2264 more potentially affected by CVE-2024-56326 via jinja2 (>=3.0.0a1, <=3.1.4)

jinja2 PYPI version =3.0.0a1, =0.1.22, =1.0.2, =0.0.2, =0.0.1, =0.0.1, =1.0.0, =1.3.0, =1.5.2, =1.5.6 and more Source cves: CVE-2024-56326 Source advisory: OSV:PYSEC-2026-1475...

aiolambda (>=0.2.0, <=0.3.0), alcazar-web-framework (0.0.2) +155 more potentially affected by CVE-2024-56326 via jinja2 (2.10.0)

jinja2 PYPI version 2.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on jinja2 and may be impacted: - aiolambda =0.2.0, =1.10.3b1, =3.0.0b4, =0.1.0, =0.0.1, =0.2.0, =0.6.7.post3, =0.7.1, =0.1.1, =1.2.1, =0.0.2, =0.0.3 - burl 1.0.0 and more Source...

afterburner (>=0.0.1, <=0.0.2), agwui (>=0.0.3, <=0.0.6) +205 more potentially affected by CVE-2024-56326 via jinja2 (2.10.3)

jinja2 PYPI version 2.10.3 is affected by a known vulnerability. The following packages have a transitive dependency on jinja2 and may be impacted: - afterburner =0.0.1, =0.0.3, =2022.9.19, =0.5.1, =1.0.0, =0.0.2, =3.2.0, =1.10.4b2, =0.0.3rc1, =0.0.0, =2.0.0 and more Source cves: CVE-2024-56326...

enochecker (>=0.0.9, <=0.2.4) potentially affected by CVE-2024-56326 via jinja2 (2.10.2)

jinja2 PYPI version 2.10.2 is affected by a known vulnerability. The following packages have a transitive dependency on jinja2 and may be impacted: - enochecker =0.0.9, =0.2.4 Source cves: CVE-2024-56326 Source advisory: OSV:PYSEC-2026-1475...

aboutcode-toolkit (>=3.0.0, <=5.1.0), abracadabra (>=0.0.6, <=0.0.7) +1720 more potentially affected by CVE-2024-56326 via jinja2 (2.11.3)

jinja2 PYPI version 2.11.3 is affected by a known vulnerability. The following packages have a transitive dependency on jinja2 and may be impacted: - aboutcode-toolkit =3.0.0, =0.0.6, =0.8.44.4rc1, =0.1.0rc3, =1.1.5, =0.1.0, =0.1.0a0, =0.1.0a0, =1.2.0a1, =2.0.0, =0.1.0, =1.1.0, =1.6.9 and more...

abracadabra (>=0.0.0, <=0.0.5), activedirectoryenum (0.5.0) +255 more potentially affected by CVE-2024-56326 via jinja2 (2.11.2)

jinja2 PYPI version 2.11.2 is affected by a known vulnerability. The following packages have a transitive dependency on jinja2 and may be impacted: - abracadabra =0.0.0, =1.0.0, =0.2.0, =0.6.2, =3.4.0, =0.1.0, =0.1.0.dev1, =5.2.15, =1.1.1, =1.5.0, =1.0.0, =1.0.1 and more Source cves: CVE-2024-563...

@andor83/mother-may-i (>=1.0.1, <=1.0.10), @base_/cli (>=1.0.6, <=1.0.29) +90 more potentially affected by CVE-2026-56326 via nuxt (>=3.0.0, <=3.20.1)

nuxt NPM version =3.0.0, =1.0.1, =1.0.6, =1.0.6, =0.9.1, =1.1.1, =1.0.1-alpha1, =1.1.0, =0.1.3, =1.0.0-29304822.f444f03, =4.0.3, =0.1.0, =8.0.0, =0.3.14, =9.8.3-rc.1, =10.0.2-rc.4 and more Source cves: CVE-2026-56326 Source advisory: SNYK:JS-NUXT-17353894...

@bloggrify/bento (>=3.0.0, <=3.0.1), @bloggrify/core (>=3.0.0, <=3.1.2) +20 more potentially affected by CVE-2026-56326 via nuxt (>=4.0.0-rc.0, <=4.4.6)

nuxt NPM version =4.0.0-rc.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =1.0.3, =10.0.2-rc.5, =1.1.11, =1.0.4, =0.4.5, =0.0.0, =1.1.0, =3.0.0-dev.27, =4.3.6 and more Source cves: CVE-2026-56326 Source advisory: SNYK:JS-NUXT-17353894...

@andor83/mother-may-i (>=1.0.1, <=1.0.10), @base_/cli (>=1.0.6, <=1.0.29) +52 more potentially affected by CVE-2026-56326 +2 more via nuxt (>=3.5.0, <=3.20.1)

nuxt NPM version =3.5.0, =1.0.1, =1.0.6, =1.0.6, =0.9.1, =1.1.1, =1.0.1-alpha1, =1.1.0, =1.0.0-29304822.f444f03, =4.0.3, =0.1.0, =8.0.0, =0.3.14, =9.8.3-rc.1, =1.12.0-rc.5, =1.12.0-rc.7 and more Source cves: CVE-2026-56326, CVE-2026-56697, CVE-2026-56698 Source advisory: OSV:GHSA-C9CV-MQ2M-PPP3...

RHCOS 9 : OpenShift Container Platform 4.12.72 (RHSA-2025:0834)

The remote Red Hat Enterprise Linux CoreOS 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2025:0834 advisory. - jinja2: Jinja has a sandbox breakout through malicious filenames CVE-2024-56201 - jinja2: Jinja has a sandbox breakout through...

MiracleLinux 8 : python-jinja2-2.10.1-6.el8_10 (AXSA:2025-9599:02)

The remote MiracleLinux 8 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2025-9599:02 advisory. jinja2: Jinja has a sandbox breakout through indirect reference to format method CVE-2024-56326 Tenable has extracted the preceding description block directl...

Security Bulletin: Vulnerability in Jinja2 affects IBM Cloud Pak for Data System 2.0 (CPDS 2.0) [CVE-2024-56326, CVE-2024-56201]

Summary The Jinja2 package is used by IBM Cloud Pak for Data System 2.0 . IBM Cloud Pak for Data System 2.0 has addressed the applicable CVEs CVE-2024-56326, CVE-2024-56201 Vulnerability Details CVEID:CVE-2024-56326 DESCRIPTION: Jinja is an extensible templating engine. Prior to 3.1.5, An oversig...

CLSA-2025-1765310613 python-jinja2: Fix of CVE-2024-56326

CVE-2024-56326: fix format string vulnerability impacting users of applications which execute untrusted template...

CLSA-2025-1765287413 python-jinja2: Fix of CVE-2024-56326

CVE-2024-56326: fix format string vulnerability impacting users of applications which execute untrusted template...

Huawei EulerOS: Security Advisory for python-jinja2 (EulerOS-SA-2025-1847)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for python-jinja2 (EulerOS-SA-2025-1722)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Security Bulletin: IBM Automation Decision Services for April 2025 - Multiple CVEs addressed

Summary IBM Automation Decision Services is vulnerable to multiple remote code execution and denial of service attacks in third party and open source used in the product for various functions. See full list below. The vulnerabilities have been addressed Vulnerability Details CVEID:CVE-2025-22870...