Lucene search
K

497 matches found

OSV
OSV
added 2024/04/30 12:0 a.m.39 views

ALSA-2024:2348 Moderate: python-jinja2 security update

The python-jinja2 package contains Jinja2, a template engine written in pure Python. Jinja2 provides a Django inspired non-XML syntax but supports inline expressions and an optional sandboxed environment. Security Fixes: jinja2: HTML attribute injection when passing user input as keys to xmlattr...

6.1CVSS6.8AI score0.00151EPSS
Exploits0References4
Tenable Nessus
Tenable Nessus
added 2024/04/28 12:0 a.m.23 views

RHEL 6 / 7 : python27-python and python27-python-jinja2 (RHSA-2019:1260)

The remote Redhat Enterprise Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2019:1260 advisory. Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high leve...

8.6CVSS6.9AI score0.0991EPSS
Exploits3References15
Tenable Nessus
Tenable Nessus
added 2024/04/28 12:0 a.m.22 views

RHEL 6 / 7 : rh-python36-python-jinja2 (RHSA-2019:1329)

The remote Redhat Enterprise Linux 6 / 7 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2019:1329 advisory. The python-jinja2 package contains Jinja2, a template engine written in pure Python. Jinja2 provides a Django inspired non-XML syntax but support...

8.6CVSS7.2AI score0.02334EPSS
Exploits1References4
OpenVAS
OpenVAS
added 2024/04/22 12:0 a.m.23 views

Huawei EulerOS: Security Advisory for python-jinja2 (EulerOS-SA-2024-1554)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.1CVSS6.5AI score0.00151EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2024/04/22 12:0 a.m.23 views

Huawei EulerOS: Security Advisory for python-jinja2 (EulerOS-SA-2024-1535)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.1CVSS6.5AI score0.00151EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2024/04/22 12:0 a.m.29 views

RHEL 6 / 7 : rh-python35-python-jinja2 (RHSA-2019:1237)

The remote Redhat Enterprise Linux 6 / 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2019:1237 advisory. The rh-python35-python-jinja2 package contains Jinja2, a template engine written in pure Python. Jinja2 provides a Django inspired non-X...

8.6CVSS7.3AI score0.02334EPSS
Exploits1References6
Tenable Nessus
Tenable Nessus
added 2024/04/19 12:0 a.m.44 views

EulerOS Virtualization 2.10.0 : python-jinja2 (EulerOS-SA-2024-1535)

According to the versions of the python-jinja2 package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Jinja is an extensible templating engine. Special placeholders in the template allow writing code similar to Python syntax...

6.1CVSS7.5AI score0.00151EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2024/04/19 12:0 a.m.25 views

EulerOS Virtualization 2.10.1 : python-jinja2 (EulerOS-SA-2024-1554)

According to the versions of the python-jinja2 package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Jinja is an extensible templating engine. Special placeholders in the template allow writing code similar to Python syntax...

6.1CVSS7.5AI score0.00151EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2024/03/13 12:0 a.m.22 views

Huawei EulerOS: Security Advisory for python-jinja2 (EulerOS-SA-2024-1346)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.1CVSS6.6AI score0.00151EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2024/03/13 12:0 a.m.19 views

Huawei EulerOS: Security Advisory for python-jinja2 (EulerOS-SA-2024-1324)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.1CVSS6.6AI score0.00151EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2024/03/12 12:0 a.m.28 views

EulerOS 2.0 SP10 : python-jinja2 (EulerOS-SA-2024-1324)

According to the versions of the python-jinja2 package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Jinja is an extensible templating engine. Special placeholders in the template allow writing code similar to Python syntax. It is possible...

6.1CVSS7.6AI score0.00151EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2024/03/12 12:0 a.m.24 views

Huawei EulerOS: Security Advisory for python-jinja2 (EulerOS-SA-2024-1223)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.1CVSS6.6AI score0.00151EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2024/03/12 12:0 a.m.42 views

EulerOS 2.0 SP11 : python-jinja2 (EulerOS-SA-2024-1245)

According to the versions of the python-jinja2 package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Jinja is an extensible templating engine. Special placeholders in the template allow writing code similar to Python syntax. It is possible...

6.1CVSS7.6AI score0.00151EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2024/03/12 12:0 a.m.22 views

EulerOS 2.0 SP11 : python-jinja2 (EulerOS-SA-2024-1223)

According to the versions of the python-jinja2 package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Jinja is an extensible templating engine. Special placeholders in the template allow writing code similar to Python syntax. It is possible...

6.1CVSS7.6AI score0.00151EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2024/03/12 12:0 a.m.15 views

Huawei EulerOS: Security Advisory for python-jinja2 (EulerOS-SA-2024-1245)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.1CVSS6.6AI score0.00151EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2024/02/06 12:0 a.m.52 views

Amazon Linux 2 : python-jinja2 (ALAS-2024-2436)

The version of python-jinja2 installed on the remote host is prior to 2.7.2-3. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2024-2436 advisory. Jinja is an extensible templating engine. Special placeholders in the template allow writing code similar to Python syntax. I...

6.1CVSS7.6AI score0.00151EPSS
Exploits0References4
Amazon
Amazon
added 2024/02/06 12:0 a.m.4 views

Medium: python-jinja2

Issue Overview: Jinja is an extensible templating engine. Special placeholders in the template allow writing code similar to Python syntax. It is possible to inject arbitrary HTML attributes into the rendered HTML template, potentially leading to Cross-Site Scripting XSS. The Jinja xmlattr filter...

6.1CVSS6.5AI score0.00151EPSS
Exploits0
Amazon
Amazon
added 2024/02/06 12:0 a.m.1 views

Medium: python-jinja2

Issue Overview: Jinja is an extensible templating engine. Special placeholders in the template allow writing code similar to Python syntax. It is possible to inject arbitrary HTML attributes into the rendered HTML template, potentially leading to Cross-Site Scripting XSS. The Jinja xmlattr filter...

6.1CVSS6.5AI score0.00151EPSS
Exploits0
Amazon
Amazon
added 2024/02/05 12:0 a.m.2 views

Medium: python-jinja2

Issue Overview: Jinja is an extensible templating engine. Special placeholders in the template allow writing code similar to Python syntax. It is possible to inject arbitrary HTML attributes into the rendered HTML template, potentially leading to Cross-Site Scripting XSS. The Jinja xmlattr filter...

6.1CVSS6.6AI score0.00151EPSS
Exploits0
OpenVAS
OpenVAS
added 2024/01/28 12:0 a.m.10 views

Fedora: Security Advisory for python-jinja2 (FEDORA-2024-604e4c3509)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.1CVSS6.6AI score0.00151EPSS
Exploits0References2
Rows per page
Query Builder