506 matches found
[SECURITY] Fedora 42 Update: python-jinja2-3.1.6-1.fc42
Jinja2 is a template engine written in pure Python. It provides a Django inspired non-XML syntax but supports inline expressions and an optional sandboxed environment. If you have any exposure to other text-based template languages, such as Smarty or Django, you should feel right at home with...
Mageia: Security Advisory (MGASA-2025-0094)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
MGASA-2025-0094 Updated python-jinja2 packages fix security vulnerability
Jinja sandbox breakout through attr filter selecting format method. CVE-2025-27516...
RHSA-2025:2612 Red Hat Security Advisory: python-jinja2 security update
Bulletin has no description...
CBL Mariner 2.0 Security Update: nodejs / nodejs18 / python-jinja2 (CVE-2025-27516)
The version of nodejs / nodejs18 / python-jinja2 installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-27516 advisory. - Jinja is an extensible templating engine. Prior to 3.1.6, an oversight in how the...
Fedora 41 : python-jinja2 (2025-cd7f5876b2)
The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-cd7f5876b2 advisory. Version 3.1.6 Released 2025-03-05 The |attr filter does not bypass the environment's attribute lookup, allowing the sandbox to apply its checks. Tenable has...
CVE-2025-27516 affecting package python-jinja2 for versions less than 3.0.3-6
CVE-2025-27516 affecting package python-jinja2 for versions less than 3.0.3-6. A patched version of the package is available...
RHEL 8 / 9 : Satellite 6.16.3 Async Update (Moderate) (RHSA-2025:2399)
The remote Redhat Enterprise Linux 8 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:2399 advisory. Red Hat Satellite is a system management solution that allows organizations to configure and maintain their systems without the necessit...
Advisory ROSA-SA-2025-2768
Software: python-jinja2 2.10.1 OS: ROSA Virtualization 3.0 packageevrstring: python-jinja2-2.10.1-6.rv30 CVE-ID: CVE-2024-56326 BDU-ID: 2025-00113 CVE-Crit: MEDIUM CVE-DESC.: A vulnerability in the str.format method of the html template tool jinja is related to a failure to neutralize special...
Advisory ROSA-SA-2025-2765
Software: python-jinja2 2.10.1 OS: ROSA Virtualization 2.1 packageevrstring: python-jinja2-2.10.1-6.rv3 CVE-ID: CVE-2024-56326 BDU-ID: 2025-00113 CVE-Crit: MEDIUM CVE-DESC.: A vulnerability in the str.format method of the html template tool jinja is related to a failure to neutralize special...
Important: python-jinja2
Issue Overview: Jinja is an extensible templating engine. Prior to 3.1.6, an oversight in how the Jinja sandboxed environment interacts with the |attr filter allows an attacker that controls the content of a template to execute arbitrary Python code. To exploit the vulnerability, an attacker need...
Important: python-jinja2
Issue Overview: Jinja is an extensible templating engine. Prior to 3.1.6, an oversight in how the Jinja sandboxed environment interacts with the |attr filter allows an attacker that controls the content of a template to execute arbitrary Python code. To exploit the vulnerability, an attacker need...
AZL-57878 CVE-2025-27516 affecting package python-jinja2 for versions less than 3.1.2-3
Jinja is an extensible templating engine. Prior to 3.1.6, an oversight in how the Jinja sandboxed environment interacts with the |attr filter allows an attacker that controls the content of a template to execute arbitrary Python code. To exploit the vulnerability, an attacker needs to control the...
Moderate: Red Hat Security Advisory: Satellite 6.16.3 Async Update
A new release is now available for Red Hat Satellite 6.16 for RHEL 8 and 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability fr...
python-jinja2 security update
2.7.2-4.0.1 - Fix for CVE-2024-56326 Orabug: 37576737...
RockyLinux 8 : python-jinja2 (RLSA-2025:0711)
The remote RockyLinux 8 host has a package installed that is affected by a vulnerability as referenced in the RLSA-2025:0711 advisory. jinja2: Jinja has a sandbox breakout through indirect reference to format method CVE-2024-56326 Tenable has extracted the preceding description block directly fro...
python-jinja2 security update
An update is available for python-jinja2. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Python is an interpreted, interactive, object-oriented programming...
Mageia: Security Advisory (MGASA-2025-0050)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
