ROOT-APP-PYPI-CVE-2024-34064 CVE-2024-34064 in Jinja2 - Patched by Root

Root has patched CVE-2024-34064 in the Jinja2 package for Root:PyPI. Multiple fixed versions available...

alo7-airflow (>=1.10.0, <=1.10.0.7), biweeklybudget (>=0.1.0, <=0.7.0) +20 more potentially affected by CVE-2024-34064 via jinja2 (2.8.1)

jinja2 PYPI version 2.8.1 is affected by a known vulnerability. The following packages have a transitive dependency on jinja2 and may be impacted: - alo7-airflow =1.10.0, =0.1.0, =4.5.0, =0.1.0, =3.0.0, =1.3.0, =3.0.0, =1.4.0rc1, =1.3.0, =2.0.0, =1.0.0a1, =1.6.0, =0.8.0.0, =0.9.0.7 and more Sourc...

catsup (>=0.3.8, <=0.3.11), geoffrey (>=0.1.0, <=0.1.2) potentially affected by CVE-2024-34064 via jinja2 (2.7.2)

jinja2 PYPI version 2.7.2 is affected by a known vulnerability. The following packages have a transitive dependency on jinja2 and may be impacted: - catsup =0.3.8, =0.1.0, =0.1.2 Source cves: CVE-2024-34064 Source advisory: OSV:PYSEC-2026-1474...

abracadabra (>=0.0.0, <=0.0.5), activedirectoryenum (0.5.0) +255 more potentially affected by CVE-2024-34064 via jinja2 (2.11.2)

jinja2 PYPI version 2.11.2 is affected by a known vulnerability. The following packages have a transitive dependency on jinja2 and may be impacted: - abracadabra =0.0.0, =1.0.0, =0.2.0, =0.6.2, =3.4.0, =0.1.0, =0.1.0.dev1, =5.2.15, =1.1.1, =1.5.0, =1.0.0, =1.0.1 and more Source cves: CVE-2024-340...

3di-cmd-client (>=0.0.1a0, <=0.0.3), alarmageddon (>=1.1.1, <=1.1.2) +127 more potentially affected by CVE-2024-34064 via jinja2 (2.10.1)

jinja2 PYPI version 2.10.1 is affected by a known vulnerability. The following packages have a transitive dependency on jinja2 and may be impacted: - 3di-cmd-client =0.0.1a0, =1.1.1, =0.1.0, =3.0.5, =0.0.14, =0.1.26, =0.0.21, =0.0.5a0, =0.0.12, =0.0.1, =0.3.4, =0.3.8 and more Source cves:...

enochecker (>=0.0.9, <=0.2.4) potentially affected by CVE-2024-34064 via jinja2 (2.10.2)

jinja2 PYPI version 2.10.2 is affected by a known vulnerability. The following packages have a transitive dependency on jinja2 and may be impacted: - enochecker =0.0.9, =0.2.4 Source cves: CVE-2024-34064 Source advisory: OSV:PYSEC-2026-1474...

async-patterns (0.2.0), bentodev (>=0.1.17, <=2018.11.2) +52 more potentially affected by CVE-2024-34064 via jinja2 (2.9.6)

jinja2 PYPI version 2.9.6 is affected by a known vulnerability. The following packages have a transitive dependency on jinja2 and may be impacted: - async-patterns 0.2.0 - bentodev =0.1.17, =1.0.0, =1.3.0, =0.6.0, =2.0.3, =1.0.18, =0.1.48, =2.10.60, =17.4.1, =4.0.0, =4.1.4 - graphene-tornado 2.0....

bb8 (>=0.1.0, <=0.2.6), blendedux (0.0.2) +71 more potentially affected by CVE-2024-34064 via jinja2 (2.8.0)

jinja2 PYPI version 2.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on jinja2 and may be impacted: - bb8 =0.1.0, =0.3.1, =4.2.6, =0.3.1, =0.9.158, =0.3.0, =0.1.8, =0.1.0, =0.3.7, =0.0.1, =0.1.0, =0.24.0, =0.24.3 - lmdo 2.3.1 and more Source cves:...

afterburner (>=0.0.1, <=0.0.2), agwui (>=0.0.3, <=0.0.6) +205 more potentially affected by CVE-2024-34064 via jinja2 (2.10.3)

jinja2 PYPI version 2.10.3 is affected by a known vulnerability. The following packages have a transitive dependency on jinja2 and may be impacted: - afterburner =0.0.1, =0.0.3, =2022.9.19, =0.5.1, =1.0.0, =0.0.2, =3.2.0, =1.10.4b2, =0.0.3rc1, =0.0.0, =2.0.0 and more Source cves: CVE-2024-34064...

aiolambda (>=0.2.0, <=0.3.0), alcazar-web-framework (0.0.2) +155 more potentially affected by CVE-2024-34064 via jinja2 (2.10.0)

jinja2 PYPI version 2.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on jinja2 and may be impacted: - aiolambda =0.2.0, =1.10.3b1, =3.0.0b4, =0.1.0, =0.0.1, =0.2.0, =0.6.7.post3, =0.7.1, =0.1.1, =1.2.1, =0.0.2, =0.0.3 - burl 1.0.0 and more Source...

RHCOS 9 : OpenShift Container Platform 4.15.25 (RHSA-2024:4958)

The remote Red Hat Enterprise Linux CoreOS 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2024:4958 advisory. - jinja2: accepts keys containing non-attribute characters CVE-2024-34064 Note that Nessus has not tested for this issue but has instead reli...

RHCOS 4 / 9 : OpenShift Container Platform 4.16.4 (RHSA-2024:4616)

The remote Red Hat Enterprise Linux CoreOS 4 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:4616 advisory. - golang: net: malformed DNS message can cause infinite loop CVE-2024-24788 - jinja2: accepts keys containing non-attribute...

MiracleLinux 8 : python-jinja2-2.10.1-5.el8_10 (AXSA:2024-8524:03)

The remote MiracleLinux 8 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2024-8524:03 advisory. jinja2: accepts keys containing non-attribute characters CVE-2024-34064 Tenable has extracted the preceding description block directly from the MiracleLinux...

MiracleLinux 9 : python-jinja2-2.11.3-6.el9 (AXSA:2024-9263:04)

The remote MiracleLinux 9 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2024-9263:04 advisory. jinja2: accepts keys containing non-attribute characters CVE-2024-34064 Tenable has extracted the preceding description block directly from the MiracleLinux...

MiracleLinux 9 : fence-agents-4.10.0-62.el9_4.3 (AXSA:2024-8287:07)

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2024-8287:07 advisory. jinja2: accepts keys containing non-attribute characters CVE-2024-34064 CVE-2024-34064 Jinja is an extensible templating engine. The xmlattr filter in affect...

TencentOS Server 3: python-jinja2 (TSSA-2024:0306)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2024:0306 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:...

Security Bulletin: Vulnerability in jinja2 affects IBM Cloud Pak for Data System 2.0 (CPDS 2.0) [CVE-2024-34064]

Summary The jinja2 package is used by IBM Cloud Pak for Data System 2.0 . IBM Cloud Pak for Data System 2.0 has addressed the applicable CVEs CVE-2024-34064 Vulnerability Details CVEID:CVE-2024-34064 DESCRIPTION: Jinja is vulnerable to cross-site scripting, caused by the acceptance of keys...

Security Bulletin: Vulnerability in Jinja2 affects IBM Cloud Pak for Data System 1.0(CPDS 1.0)[CVE-2024-34064].

Summary The Jinja2 package is used by IBM Cloud Pak for Data System 1.0. IBM Cloud Pak for Data System 1.0 has addressed the applicable CVE CVE-2024-34064. Vulnerability Details CVEID:CVE-2024-34064 DESCRIPTION: Jinja is vulnerable to cross-site scripting, caused by the acceptance of keys...

CVE-2024-34064 affecting package nodejs for versions less than 20.14.0-1

CVE-2024-34064 affecting package nodejs for versions less than 20.14.0-1. A patched version of the package is available...

RockyLinux 9 : python-jinja2 (RLSA-2024:9150)

The remote RockyLinux 9 host has a package installed that is affected by a vulnerability as referenced in the RLSA-2024:9150 advisory. jinja2: accepts keys containing non-attribute characters CVE-2024-34064 Tenable has extracted the preceding description block directly from the RockyLinux securit...