The vulnerability of the Jinja2 HTML templating tool, a programming language interpreter for Python, allows attackers to trigger a denial-of-service attack.

The vulnerability of the Jinja2 HTML templating engine, a Python-based programming language interpreter, is related to improper cleaning or release of resources. Exploiting this vulnerability can allow an attacker, operating remotely, to cause service failures...

[SECURITY] Fedora 36 Update: golang-github-eknkc-amber-0-0.18.20190601gitcdade1c.fc36

Amber is an elegant templating engine for Go Programming Language It is inspi red from HAML and Jade...

Exploit for Code Injection in Ejs

CVE-2022-29078 vuln ejs 3.1.6 docker Setup git clone h...

[SECURITY] Fedora 35 Update: golang-github-eknkc-amber-0-0.17.20190601gitcdade1c.fc35

Amber is an elegant templating engine for Go Programming Language It is inspi red from HAML and Jade...

[SECURITY] Fedora 36 Update: golang-github-eknkc-amber-0-0.17.20190601gitcdade1c.fc36

Amber is an elegant templating engine for Go Programming Language It is inspi red from HAML and Jade...

PT-2022-8884 · Form.Io · Form.Io

Name of the Vulnerable Software and Affected Versions: Form.io version 2.0.0 Description: A Server-Side Template Injection SSTI issue was discovered, leading to Remote Code Execution during the deletion of the default Email template URL. The email templating service was removed after 2020. The...

GHSA-P6QC-37HQ-WQR6 Remote code execution vulnerability in Jenkins Templating Engine Plugin

Jenkins Templating Engine Plugin 2.1 and earlier does not protect its pipeline configurations using Script Security Plugin. This vulnerability allows attackers with Job/Configure permission to execute arbitrary code in the context of the Jenkins controller JVM. Jenkins Templating Engine Plugin 2....

Remote code execution vulnerability in Jenkins Templating Engine Plugin

Jenkins Templating Engine Plugin 2.1 and earlier does not protect its pipeline configurations using Script Security Plugin. This vulnerability allows attackers with Job/Configure permission to execute arbitrary code in the context of the Jenkins controller JVM. Jenkins Templating Engine Plugin 2....

[SECURITY] Fedora 36 Update: esh-0.3.2-1.fc36

esh embedded shell is a templating engine for evaluating shell commands embedded in arbitrary templates. It=EF=BF=BD=EF=BF=BD=EF=BF=BDs like ERB Emb edded RuBy for shell, intended to be used for templating configuration files...

[SECURITY] Fedora 35 Update: esh-0.3.2-1.fc35

esh embedded shell is a templating engine for evaluating shell commands embedded in arbitrary templates. It=EF=BF=BD=EF=BF=BD=EF=BF=BDs like ERB Emb edded RuBy for shell, intended to be used for templating configuration files...

[SECURITY] Fedora 34 Update: esh-0.3.2-1.fc34

esh embedded shell is a templating engine for evaluating shell commands embedded in arbitrary templates. It=EF=BF=BD=EF=BF=BD=EF=BF=BDs like ERB Emb edded RuBy for shell, intended to be used for templating configuration files...

Fedora: Security Advisory for cobbler (FEDORA-2022-445ec90e7c)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 35 Update: cobbler-3.2.2-9.fc35

Cobbler is a network install server. Cobbler supports PXE, ISO virtualized installs, and re-installing existing Linux machines. The last two modes use a helper tool, 'koan', that integrates with cobbler. There is also a web interface 'cobbler-web'. Cobbler's advanced features include importing...

Fedora: Security Advisory for cobbler (FEDORA-2022-ad2b0ad61b)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 36 Update: cobbler-3.3.2-1.fc36

Cobbler is a network install server. Cobbler supports PXE, ISO virtualized installs, and re-installing existing Linux machines. The last two modes use a helper tool, 'koan', that integrates with cobbler. Cobbler's advanced features include importing distributions from DVDs and rsync mirrors,...

[SECURITY] Fedora 36 Update: cobbler-3.3.1-1.fc36

Cobbler is a network install server. Cobbler supports PXE, ISO virtualized installs, and re-installing existing Linux machines. The last two modes use a helper tool, 'koan', that integrates with cobbler. Cobbler's advanced features include importing distributions from DVDs and rsync mirrors,...

Fedora: Security Advisory for cobbler (FEDORA-2022-0649006be6)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 35 Update: cobbler-3.2.2-10.fc35

Cobbler is a network install server. Cobbler supports PXE, ISO virtualized installs, and re-installing existing Linux machines. The last two modes use a helper tool, 'koan', that integrates with cobbler. There is also a web interface 'cobbler-web'. Cobbler's advanced features include importing...

[SECURITY] Fedora 34 Update: cobbler-3.2.2-10.fc34

Cobbler is a network install server. Cobbler supports PXE, ISO virtualized installs, and re-installing existing Linux machines. The last two modes use a helper tool, 'koan', that integrates with cobbler. There is also a web interface 'cobbler-web'. Cobbler's advanced features include importing...

Antaris RazorEngine has an unspecified vulnerability

Antaris RazorEngine is an open source templating engine based on Microsoft's Razor parsing engine from Matthew Abbott, a personal developer in the U.K. Antaris RazorEngine contains a security vulnerability that could be exploited by attackers to execute arbitrary .NET code in a sandboxed...