jinja2: Jinja vulnerable to HTML attribute injection when passing user input as keys to xmlattr filter
Jinja vulnerable to HTML attribute injection when passing user input as keys to xmlattr filter (moderate). GHSA-h5c8-rqwp-cp95, CVE-2024-22195, PYSEC-2026-1473.
osv.devquote checked- security advisory
- Your codeby hand
Nemotron fixes
In its own wordsmatches the page ✓
Jinja vulnerable to HTML attribute injection when passing user input as keys to xmlattr filter
What Teire looks for in your code
nothing to search for: checked by hand
Does it reach your code?