2 matches found
PT-2025-9857
Name of the Vulnerable Software and Affected Versions Jinja versions prior to 3.1.6 Description Jinja is an extensible templating engine. An oversight in how the Jinja sandboxed environment interacts with the |attr filter allows an attacker that controls the content of a template to execute...
8.8CVSS8.2AI score0.00507EPSS
SaveExploits0References267
PT-2024-9991
Name of the Vulnerable Software and Affected Versions Jinja versions prior to 3.1.5 Description Jinja is an extensible templating engine. An oversight in how the Jinja sandboxed environment detects calls to str.format allows an attacker that controls the content of a template to execute arbitrary...
10CVSS7.3AI score0.00522EPSS
SaveExploits0References283
20