jinja2
PyPIlatest 3.1.6 · 2025-03-05pypi.org · all 52 versions
Security advisories7
- jinja2: Jinja2 sandbox escape via string formattingfixed in 2.10.1
- jinja2: Jinja2 vulnerable to sandbox breakout through attr filter selecting format methodfixed in 3.1.6
- jinja2: Regular Expression Denial of Service (ReDoS) in Jinja2fixed in 2.11.3
- jinja2: Jinja has a sandbox breakout through malicious filenamesfixed in 3.1.5
- jinja2: Jinja vulnerable to HTML attribute injection when passing user input as keys to xmlattr filterfixed in 3.1.3
- jinja2: Jinja vulnerable to HTML attribute injection when passing user input as keys to xmlattr filterfixed in 3.1.4
- jinja2: Jinja has a sandbox breakout through indirect reference to format methodfixed in 3.1.5
Versions that change something
- 2.10.12019-04fixes 1 advisory
- 2.11.32021-01fixes 1 advisory
- 3.1.32024-01fixes 1 advisory
- 3.1.42024-05fixes 1 advisory