VIR Vulnerability Intelligence Relay

Package impact

python PyPI / jinja2

Severitycriticalhighmediumlowunknown
0
KEVHas exploit
Reset
CVE Severity CVSS Risk Published Description Impact
CVE-2025-49142 medium — 5.5 1y ago Nautobot is a Network Source of Truth and Network Automation Platform. All users of Nautobot versions prior to 2.4.10 or prior to 1.6.32 are potentially affected. Due to insufficient security configu… python
CVE-2024-34064 medium — 5.5 2y ago Moderate: python-jinja2 security update redhatrockylinuxsusedebian+2
CVE-2024-22195 medium — 5.5 2y ago Moderate: fence-agents security and bug fix update redhatrockylinuxsusedebian+2
CVE-2020-28493 medium — 5.5 5y ago Moderate: python38:3.8 and python38-devel:3.8 security update archsuserockylinuxdebian+1
CVE-2014-1402 medium — 4.4 12y ago The default configuration for bccache.FileSystemBytecodeCache in Jinja2 before 2.7.2 does not properly create temporary files, which allows local users to gain privileges via a crafted .cache file wi… debianpython
CVE-2014-0012 medium — 4.4 12y ago FileSystemBytecodeCache in Jinja2 2.7.2 does not properly create temporary directories, which allows local users to gain privileges by pre-creating a temporary directory with a user's uid. NOTE: thi… debianpython