HIGH8.6PyPI
GHSA-462w-v97r-4m45· CVE-2019-10906, PYSEC-2019-217Jinja2 sandbox escape via string formatting
Modified: 9/24/2024
package
PyPI/jinja2
pkg:pypi/jinja2
HIGH8.4PyPI
GHSA-8r7q-cvjq-x353· CVE-2014-1402, PYSEC-2014-8Incorrect Privilege Assignment in Jinja2
Modified: 9/24/2024
MEDIUMPyPI
GHSA-cpwx-vrp4-4pq7· CVE-2025-27516, PYSEC-2026-1471Jinja2 vulnerable to sandbox breakout through attr filter selecting format method
Modified: 9/10/2026
MEDIUM6.2PyPI
GHSA-fqh9-2qgg-h84h· CVE-2014-0012, PYSEC-2014-82Insecure Temporary File in Jinja2
Modified: 9/23/2024
MEDIUM5.3PyPI
GHSA-g3rq-g295-4j3m· CVE-2020-28493, PYSEC-2021-66Regular Expression Denial of Service (ReDoS) in Jinja2
Modified: 2/14/2025
HIGH8.8PyPI
GHSA-gmj6-6f8f-6699· CVE-2024-56201, PYSEC-2026-1472Jinja has a sandbox breakout through malicious filenames
Modified: 9/10/2026
MEDIUM5.4PyPI
GHSA-h5c8-rqwp-cp95· CVE-2024-22195, PYSEC-2026-1473Jinja vulnerable to HTML attribute injection when passing user input as keys to xmlattr filter
Modified: 9/10/2026
MEDIUM5.4PyPI
GHSA-h75v-3vvj-5mfj· CVE-2024-34064, PYSEC-2026-1474Jinja vulnerable to HTML attribute injection when passing user input as keys to xmlattr filter
Modified: 9/10/2026
HIGH8.6PyPI
GHSA-hj2j-77xm-mc5v· CVE-2016-10745, PYSEC-2019-220Jinja2 sandbox escape vulnerability
Modified: 9/24/2024
HIGH7.8PyPI
GHSA-q2x7-8rv6-6q7h· CVE-2024-56326, PYSEC-2026-1475Jinja has a sandbox breakout through indirect reference to format method
Modified: 9/10/2026
—PyPI
PYSEC-2014-8· CVE-2014-1402, GHSA-8r7q-cvjq-x353Modified: 11/8/2023
—PyPI
PYSEC-2014-82· CVE-2014-0012, GHSA-fqh9-2qgg-h84hModified: 6/10/2026
—PyPI
PYSEC-2019-217· CVE-2019-10906, GHSA-462w-v97r-4m45Modified: 11/8/2023
—PyPI
PYSEC-2019-220· CVE-2016-10745, GHSA-hj2j-77xm-mc5vModified: 11/8/2023
—PyPI
PYSEC-2021-66· CVE-2020-28493, GHSA-g3rq-g295-4j3mModified: 11/8/2023
—PyPI
PYSEC-2026-1471· CVE-2025-27516, GHSA-cpwx-vrp4-4pq7Jinja2 vulnerable to sandbox breakout through attr filter selecting format method
Modified: 7/7/2026
HIGH8.8PyPI
PYSEC-2026-1472· CVE-2024-56201, GHSA-gmj6-6f8f-6699Jinja has a sandbox breakout through malicious filenames
Modified: 7/7/2026
MEDIUM5.4PyPI
PYSEC-2026-1473· CVE-2024-22195, GHSA-h5c8-rqwp-cp95Jinja vulnerable to HTML attribute injection when passing user input as keys to xmlattr filter
Modified: 7/7/2026
MEDIUM5.4PyPI
PYSEC-2026-1474· CVE-2024-34064, GHSA-h75v-3vvj-5mfjJinja vulnerable to HTML attribute injection when passing user input as keys to xmlattr filter
Modified: 7/7/2026
HIGH7.8PyPI
PYSEC-2026-1475· CVE-2024-56326, GHSA-q2x7-8rv6-6q7hJinja has a sandbox breakout through indirect reference to format method
Modified: 7/7/2026