Jinja Cross-Site Scripting Vulnerability

Pallets Jinja is a template engine written in the Python language. A security vulnerability exists in Jinja versions prior to 3.1.3, which stems from a cross-site scripting XSS vulnerability...

PYSEC-2023-37

Nautobot is a Network Source of Truth and Network Automation Platform. All users of Nautobot versions earlier than 1.5.7 are impacted by a remote code execution vulnerability. Nautobot did not properly sandbox Jinja2 template rendering. In Nautobot 1.5.7 has enabled sandboxed environments for the...