Product by Pallets
Jinja
5 known vulnerabilities in Jinja (Pallets), 0 of them actively exploited (CISA KEV).
Key figures
5
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
0
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2025-27516 | Jinja sandbox breakout through attr filter selecting format method | 8.8 | |
| Medium | CVE-2024-34064 | Jinja vulnerable to HTML attribute injection when passing user input as keys to xmlattr filter | 5.4 | |
| High | CVE-2024-56326 | Jinja has a sandbox breakout through indirect reference to format method | 7.8 | |
| Medium | CVE-2024-22195 | Jinja vulnerable to Cross-Site Scripting (XSS) | 5.4 | |
| High | CVE-2024-56201 | Jinja has a sandbox breakout through malicious filenames | 8.8 |