Lucene search
+L

2 matches found

OSV
OSV
•added 2026/09/25 1:27 a.m.•6 views

OESA-2026-4061 python-templated-dictionary security update

Dictionary where getitem is run through Jinja2 template. Security Fixes: The Mock software contains a vulnerability wherein an attacker could potentially exploit privilege escalation, enabling the execution of arbitrary code with root user privileges. This weakness stems from the absence of prope...

9.8CVSS7.9AI score0.01552EPSS
SaveExploits1References2
Veracode
Veracode
•added 2024/01/17 7:30 a.m.•25 views

Privilege Escalation

templated-dictionary is vulnerable to Privilege Escalation. The vulnerability is caused due to absence of proper sandboxing mechanisms during the expansion and execution of Jinja2 templates. This allows an attacker to define configuration tags that potentially lead to privilege escalation or code...

9.8CVSS7.7AI score0.01552EPSS
SaveExploits1References9Affected Software1
Rows per page
Query Builder