jinja2 vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2025-27516MediumJinja2: Jinja2 vulnerable to sandbox breakout through attr filter selecting format method CVE-2024-56326Mediumjinja2: Jinja has a sandbox breakout through indirect reference to format method CVE-2024-56201Mediumjinja2: Jinja has a sandbox breakout through malicious filenames CVE-2024-34064MediumJinja2: Jinja vulnerable to HTML attribute injection when passing user input as keys to xmlattr filter CVE-2024-22195Mediumjinja2: Jinja vulnerable to HTML attribute injection when passing user input as keys to xmlattr filter CVE-2014-0012MediumJinja2: Insecure Temporary File in Jinja2 CVE-2014-1402HighJinja2: Incorrect Privilege Assignment in Jinja2 CVE-2020-28493Mediumjinja2: Regular Expression Denial of Service (ReDoS) in Jinja2 CVE-2019-10906HighJinja2: Jinja2 sandbox escape via string formatting CVE-2016-10745HighJinja2: Jinja2 sandbox escape vulnerability

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Get a personalized demo