Known vulnerabilities in Jinja

Vendor: The Pallets Projects
Software: Jinja
Software CPE: cpe:2.3:a:palletsprojects:jinja:*:*:*:*:*:python:*:*
Website: https://palletsprojects.com/
Total vulnerabilities: 8
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Jinja Jinja is affected by 8 known vulnerabilities: 4 medium, 4 low Critical High Medium Low

Vulnerabilities (8)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU105387 - Improper input validation
CVE-2025-27516		 CWE-20 Low
No
No
 3.1.6 06.03.2025 SB2025030628
SB2025031001
SB2025031002
and 83 more
#VU101972 - Security Features
CVE-2024-56326		 CWE-254 Low
No
No
 3.1.5 27.12.2024 SB2024122789
SB2024122790
SB2024122791
and 78 more
#VU101971 - Security Features
CVE-2024-56201		 CWE-254 Low
No
No
 3.1.5 27.12.2024 SB2024122789
SB2025010203
SB2025010322
and 62 more
#VU89677 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-34064		 CWE-79 Medium
No
No
 3.1.4 20.05.2024 SB2024052067
SB2024052081
SB2024052082
and 83 more
#VU85368 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-22195		 CWE-79 Medium
No
No
 3.1.3 15.01.2024 SB2024011508
SB2024011512
SB2024011513
and 60 more
#VU50430 - Incorrect Regular Expression
CVE-2020-28493		 CWE-185 Medium
No
No
 2.11.3 01.02.2021 SB2021020905
SB2021020908
SB2021020909
and 21 more
#VU23000 - Exposure of sensitive information to an unauthorized actor
CVE-2016-10745		 CWE-200 Low
No
No
 2.8.1 26.11.2019 SB2016123002
SB2019112613
SB2019120317
and 7 more
#VU21765 - Permissions, Privileges, and Access Controls
CVE-2019-10906		 CWE-264 Medium
No
No
 2.10.1 14.10.2019 SB2019040701
SB2019051307
SB2019051615
and 6 more