2 matches found
PT-2025-9857
Name of the Vulnerable Software and Affected Versions Jinja versions prior to 3.1.6 Description Jinja is an extensible templating engine. An oversight in how the Jinja sandboxed environment interacts with the |attr filter allows an attacker that controls the content of a template to execute...
9.8CVSS8.2AI score0.00497EPSS
SaveExploits0References258
PT-2024-9991
Name of the Vulnerable Software and Affected Versions Jinja versions prior to 3.1.5 Description Jinja is an extensible templating engine. An oversight in how the Jinja sandboxed environment detects calls to str.format allows an attacker that controls the content of a template to execute arbitrary...
9.8CVSS7.3AI score0.00521EPSS
SaveExploits0References275
20