What’s Vulnerable › Products

pallets jinja vulnerabilities

8 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 3 published in the last 12 months.

Check whether your pallets jinja version is affected

Latest pallets jinja vulnerabilities

• CVE-2025-27516 — Jinja sandbox breakout through attr filter selecting format method (CVSS 8.8)
• CVE-2024-56326 — Jinja has a sandbox breakout through indirect reference to format method (CVSS 7.8)
• CVE-2024-56201 — Jinja has a sandbox breakout through malicious filenames (CVSS 8.8)
• CVE-2024-34064 — Jinja vulnerable to HTML attribute injection when passing user input as keys to xmlattr filter (CVSS 5.4)
• CVE-2024-22195 — Jinja vulnerable to Cross-Site Scripting (XSS) (CVSS 6.1)
• CVE-2020-28493 — Regular Expression Denial of Service (ReDoS) (CVSS 5.3)
• CVE-2016-10745 — (CVSS 8.6)
• CVE-2019-10906 — (CVSS 8.6)