jinja2 has 2 CVEs on record. The median CVSS is 5.4 (medium).

CVEs per month

Last 12 months, by publish date

1125/111225/120126/010226/020326/030426/040526/050626/060726/070826/080926/091026/10

Exploited share: 0% vs 1% corpus
Median CVSS: 5.4
Publish → KEV: —
Last 90 days: 0 prev 0

Weakness classes

CWE-79 1

Products

jinja2 2

Follow jinja2:RSS feed Save a search →Embed badge ↗

2

Total CVEs

0

Critical

0

CISA KEV

0

Exploited

Worst active — by depth score

CVE-2024-34064Medium· 5.4Jinja vulnerable to HTML attribute injection when passing user input as keys to xmlattr filter42
CVE-2024-22195Medium· 5.4Jinja vulnerable to HTML attribute injection when passing user input as keys to xmlattr filter30

jinja2 vulnerabilities

CVEs affecting jinja2, newest first. Open any entry for full detail, references, and exploit status.

2 CVEsRSS

CVE-2024-34064Medium· 5.4PoC

Jinja vulnerable to HTML attribute injection when passing user input as keys to xmlattr filter

Jinja vulnerable to HTML attribute injection when passing user input as keys to xmlattr filter

▾ Twilightjinja2 · jinja2EPSS 0.98%via OSV

CVE-2024-22195Medium· 5.4

Jinja vulnerable to HTML attribute injection when passing user input as keys to xmlattr filter

Jinja vulnerable to HTML attribute injection when passing user input as keys to xmlattr filter

▾ Sunlitjinja2 · jinja2EPSS 0.89%via OSV

jinja2 vulnerabilities (CVEs) · VulnSea