2 matches found
OESA-2026-4061 python-templated-dictionary security update
Dictionary where getitem is run through Jinja2 template. Security Fixes: The Mock software contains a vulnerability wherein an attacker could potentially exploit privilege escalation, enabling the execution of arbitrary code with root user privileges. This weakness stems from the absence of prope...
9.8CVSS7.9AI score0.01552EPSS
SaveExploits1References2
Privilege Escalation
templated-dictionary is vulnerable to Privilege Escalation. The vulnerability is caused due to absence of proper sandboxing mechanisms during the expansion and execution of Jinja2 templates. This allows an attacker to define configuration tags that potentially lead to privilege escalation or code...
9.8CVSS7.7AI score0.01552EPSS
SaveExploits1References9Affected Software1
20