| Release | Version |
|---|---|
| bullseye | 2.11.3-1 |
| bullseye (security) | 2.11.3-1+deb11u2 |
| bookworm | 3.1.2-1+deb12u1 |
| trixie | 3.1.3-1.1 |
| sid | 3.1.3-2 |
| Bug | bullseye | bookworm | trixie | sid | Description |
|---|---|---|---|---|---|
| CVE-2024-56326 | vulnerable | vulnerable | vulnerable | vulnerable | Jinja is an extensible templating engine. Prior to 3.1.5, An oversight ... |
| CVE-2024-56201 | vulnerable | vulnerable | vulnerable | vulnerable | Jinja is an extensible templating engine. In versions on the 3.x branc ... |
| Bug | bullseye | bookworm | trixie | sid | Description |
|---|---|---|---|---|---|
| CVE-2019-8341 | vulnerable | vulnerable | vulnerable | vulnerable | An issue was discovered in Jinja2 2.10. The from_string function is pr ... |
| Bug | Description |
|---|---|
| CVE-2024-34064 | Jinja is an extensible templating engine. The `xmlattr` filter in affe ... |
| CVE-2024-22195 | Jinja is an extensible templating engine. Special placeholders in the ... |
| CVE-2020-28493 | This affects the package jinja2 from 0.0.0 and before 2.11.3. The ReDo ... |
| CVE-2019-10906 | In Pallets Jinja before 2.10.1, str.format_map allows a sandbox escape ... |
| CVE-2016-10745 | In Pallets Jinja before 2.8.1, str.format allows a sandbox escape. |
| CVE-2014-1402 | The default configuration for bccache.FileSystemBytecodeCache in Jinja ... |
| CVE-2014-0012 | FileSystemBytecodeCache in Jinja2 2.7.2 does not properly create tempo ... |
| DSA / DLA | Description |
|---|---|
| DLA-3988-2 | jinja2 - regression update |
| DLA-3988-1 | jinja2 - security update |
| DLA-3715-1 | jinja2 - security update |