developer_hub_rhdh vulnerabilities

CVEs whose affected-version data names the developer_hub_rhdh package (pip). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2024-56201High· 7.3

1y ago

jinja2: Jinja has a sandbox breakout through malicious filenames (CVE-2024-56201)

A flaw was found in the Jinja2 package. A bug in the Jinja compiler allows an attacker that controls both the content and filename of a template to execute arbitrary Python code, regardless of Jinja's sandbox being used. An attacker needs …

▾ TwilightRed Hat · Red Hat OpenShift Container Platform 4.18EPSS 0.31%via CSAF