discovery_1_for_rhel vulnerabilities
CVEs whose affected-version data names the discovery_1_for_rhel package (pip). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2024-56326Medium· 6.3jinja2: Jinja has a sandbox breakout through indirect reference to format method (CVE-2024-56326)
A flaw was found in the Jinja package. In affected versions of Jinja, an oversight in how the Jinja sandboxed environment detects calls to str.format allows an attacker that controls the content of a template to execute arbitrary Python co…
▾ SunlitRed Hat · Red Hat OpenShift Container Platform 4.18EPSS 0.52%via CSAF
CVE-2024-56201High· 7.3jinja2: Jinja has a sandbox breakout through malicious filenames (CVE-2024-56201)
A flaw was found in the Jinja2 package. A bug in the Jinja compiler allows an attacker that controls both the content and filename of a template to execute arbitrary Python code, regardless of Jinja's sandbox being used. An attacker needs …
▾ TwilightRed Hat · Red Hat OpenShift Container Platform 4.18EPSS 0.31%via CSAF