Lucene search
K

5 matches found

OpenVAS
OpenVAS
added 2025/08/12 12:0 a.m.4 views

Huawei EulerOS: Security Advisory for python-jinja2 (EulerOS-SA-2025-1966)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS8.1AI score0.00465EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2025/02/04 12:0 a.m.10 views

RHEL 9 : python-jinja2 (RHSA-2025:0951)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2025:0951 advisory. Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic dat...

7.8CVSS7AI score0.00496EPSS
Exploits0References4
OSV
OSV
added 2024/01/11 3:15 a.m.0 views

AZL-35134 CVE-2024-22195 affecting package python-jinja2 for versions less than 3.1.2-2

Jinja is an extensible templating engine. Special placeholders in the template allow writing code similar to Python syntax. It is possible to inject arbitrary HTML attributes into the rendered HTML template, potentially leading to Cross-Site Scripting XSS. The Jinja xmlattr filter can be abused t...

6.1CVSS6.9AI score0.00892EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2022/01/24 12:0 a.m.33 views

GLSA-202107-19 : Jinja: Denial of service

The remote host is affected by the vulnerability described in GLSA-202107-19 Jinja: Denial of service The urlize filter in Jinja utilized an inefficient regular expression that could be exploited to consume excess CPU. Impact : An attacker could cause a Denial of Service condition via crafted inp...

5.3CVSS7.2AI score0.03546EPSS
Exploits1References2
ArchLinux
ArchLinux
added 2021/02/07 12:0 a.m.140 views

[ASA-202102-19] python-jinja: denial of service

Arch Linux Security Advisory ASA-202102-19 ========================================== Severity: Low Date : 2021-02-07 CVE-ID : CVE-2020-28493 Package : python-jinja Type : denial of service Remote : Yes Link : https://security.archlinux.org/AVG-1523 Summary ======= The package python-jinja before...

5.3CVSS1.8AI score0.03546EPSS
Exploits1References5
Rows per page
Query Builder