Jinja

6 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2025-27516 Mar 05, 21:15 PyPI MEDIUM PATCH This Month

Jinja is an extensible templating engine. Rated medium severity (CVSS 5.4), this vulnerability is low attack complexity.

RCE Python Debian Red Hat Ssti +4

NVD GitHub

CVSS 4.0

5.4

EPSS

0.2%

CVE-2024-56326 Dec 23, 16:15 PyPI MEDIUM PATCH This Month

Jinja is an extensible templating engine. Rated medium severity (CVSS 5.4), this vulnerability is low attack complexity.

RCE Python Jinja Palletsprojects

NVD GitHub

CVSS 4.0

5.4

EPSS

0.5%

CVE-2024-56201 Dec 23, 16:15 PyPI MEDIUM PATCH This Month

Jinja is an extensible templating engine. Rated medium severity (CVSS 5.4), this vulnerability is low attack complexity.

RCE Python Jinja Palletsprojects

NVD GitHub

CVSS 4.0

5.4

EPSS

0.3%

CVE-2024-34064 May 06, 15:15 PyPI MEDIUM PATCH This Month

Jinja is an extensible templating engine. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Cross-Site Scripting (XSS) vulnerability could allow attackers to inject malicious scripts into web pages viewed by other users.

XSS Fedora Jinja Palletsprojects Fedoraproject

NVD GitHub

CVSS 3.1

5.4

EPSS

1.0%

CVE-2024-22195 Jan 11, 03:15 PyPI MEDIUM PATCH This Month

Jinja is an extensible templating engine. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

XSS Python Jinja Palletsprojects

NVD GitHub

CVSS 3.1

5.4

EPSS

0.2%

CVE-2019-10906 Apr 07, 00:29 PyPI HIGH PATCH This Week

In Pallets Jinja before 2.10.1, str.format_map allows a sandbox escape. Rated high severity (CVSS 8.6), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Red Hat Canonical Fedora Leap +6

NVD

CVSS 3.1

8.6

EPSS

3.6%

CVE-2025-27516 PyPI

EPSS 0% CVSS 5.4

MEDIUM PATCH This Month

Jinja is an extensible templating engine. Rated medium severity (CVSS 5.4), this vulnerability is low attack complexity.

RCE Python Debian +6

NVD GitHub

CVE-2024-56326 PyPI

EPSS 0% CVSS 5.4

MEDIUM PATCH This Month

Jinja is an extensible templating engine. Rated medium severity (CVSS 5.4), this vulnerability is low attack complexity.

RCE Python Jinja +1

NVD GitHub

CVE-2024-56201 PyPI

EPSS 0% CVSS 5.4

MEDIUM PATCH This Month

Jinja is an extensible templating engine. Rated medium severity (CVSS 5.4), this vulnerability is low attack complexity.

RCE Python Jinja +1

NVD GitHub

CVE-2024-34064 PyPI

EPSS 1% CVSS 5.4

MEDIUM PATCH This Month

XSS Fedora Jinja +2

NVD GitHub

CVE-2024-22195 PyPI

EPSS 0% CVSS 5.4

MEDIUM PATCH This Month

Jinja is an extensible templating engine. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

XSS Python Jinja +1

NVD GitHub

CVE-2019-10906 PyPI

EPSS 4% CVSS 8.6

HIGH PATCH This Week

Information Disclosure Red Hat Canonical +8

NVD