https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 12:18:02 +0000 https://cve.radiocsirt.org/vuln/bdu:2019-01179 bdu:2019-01179 https://cve.radiocsirt.org/vuln/bdu:2019-01179 https://cve.radiocsirt.org/vuln/bell-cve-2019-8341 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Withdrawn by the publisher.</strong></p> https://cve.radiocsirt.org/vuln/bell-cve-2019-8341 https://cve.radiocsirt.org/vuln/euvd-2026-52045 EUVD-2026-52045 https://cve.radiocsirt.org/vuln/euvd-2026-52045 https://cve.radiocsirt.org/vuln/fkie_cve-2019-8341 <p>An issue was discovered in Jinja2 2.10. The from_string function is prone to Server Side Template Injection (SSTI) where it takes the &#34;source&#34; parameter as a template object, renders it, and then returns it. The attacker can exploit it with {{INJECTION COMMANDS}} in a URI. NOTE: The maintainer and multiple third parties believe that this vulnerability isn&#39;t valid because users shouldn&#39;t use untrusted templates without sandboxing</p> <p>An issue was discovered in Jinja2 2.10. The from_string function is prone to Server Side Template Injection (SSTI) where it takes the &#34;source&#34; parameter as a template object, renders it, and then returns it. The attacker can exploit it with {{INJECTION COMMANDS}} in a URI. NOTE: The maintainer and multiple third parties believe that this vulnerability isn&#39;t valid because users shouldn&#39;t use untrusted templates without sandboxing</p> https://cve.radiocsirt.org/vuln/fkie_cve-2019-8341 https://cve.radiocsirt.org/vuln/ghsa-f6pv-j8mr-w6rr <p>** DISPUTED ** An issue was discovered in Jinja2 2.10. The from_string function is prone to Server Side Template Injection (SSTI) where it takes the &#34;source&#34; parameter as a template object, renders it, and then returns it. The attacker can exploit it with {{INJECTION COMMANDS}} in a URI. NOTE: The maintainer and multiple third parties believe that this vulnerability isn&#39;t valid because users shouldn&#39;t use untrusted templates without sandboxing.</p> <p>** DISPUTED ** An issue was discovered in Jinja2 2.10. The from_string function is prone to Server Side Template Injection (SSTI) where it takes the &#34;source&#34; parameter as a template object, renders it, and then returns it. The attacker can exploit it with {{INJECTION COMMANDS}} in a URI. NOTE: The maintainer and multiple third parties believe that this vulnerability isn&#39;t valid because users shouldn&#39;t use untrusted templates without sandboxing.</p> https://cve.radiocsirt.org/vuln/ghsa-f6pv-j8mr-w6rr https://cve.radiocsirt.org/vuln/gsd-2019-8341 gsd-2019-8341 https://cve.radiocsirt.org/vuln/gsd-2019-8341 https://cve.radiocsirt.org/vuln/opensuse-su-2019:1395-1 <p>Security update for python-Jinja2</p> <p>Security update for python-Jinja2</p> https://cve.radiocsirt.org/vuln/opensuse-su-2019:1395-1 https://cve.radiocsirt.org/vuln/suse-su-2019:1156-1 <p>Security update for python-Jinja2</p> <p>Security update for python-Jinja2</p> https://cve.radiocsirt.org/vuln/suse-su-2019:1156-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2019-8341 <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: jinja2, Ubuntu:Pro:16.04:LTS: jinja2, Ubuntu:Pro:18.04:LTS: jinja2</p> <p>An issue was discovered in Jinja2 2.10. The from_string function is prone to Server Side Template Injection (SSTI) where it takes the &#34;source&#34; parameter as a template object, renders it, and then returns it. The attacker can exploit it with {{INJECTION COMMANDS}} in a URI. NOTE: The maintainer and multiple third parties believe that this vulnerability isn&#39;t valid because users shouldn&#39;t use untrusted templates without sandboxing</p> <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: jinja2, Ubuntu:Pro:16.04:LTS: jinja2, Ubuntu:Pro:18.04:LTS: jinja2</p> <p>An issue was discovered in Jinja2 2.10. The from_string function is prone to Server Side Template Injection (SSTI) where it takes the &#34;source&#34; parameter as a template object, renders it, and then returns it. The attacker can exploit it with {{INJECTION COMMANDS}} in a URI. NOTE: The maintainer and multiple third parties believe that this vulnerability isn&#39;t valid because users shouldn&#39;t use untrusted templates without sandboxing</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2019-8341