Сообщество свободного программного обеспечения jinja

Name: Сообщество свободного программного обеспечения jinja
Brand: Сообщество свободного программного обеспечения

productRU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

EPSS ≥ 10%

critical

by severity

0critical2high1medium0low

updated 2026-10-28

vulnerabilities (5)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2024-34064US	—	0.98% (62nd)	Exploit	no fix	2024-05-06	≤ 3.1.4
CVE-2020-28493US	medium5.3	3.59% (89th)	—	no fix	2021-02-01	≤ 2.11.3
CVE-2024-56326US	—	0.52% (44th)	—	no fix	2024-12-23	≤ 3.1.5
CVE-2025-27516US	high8.8	0.51% (43rd)	—	no fix	2025-03-05	≤ 3.1.6
CVE-2024-56201US	high8.8	0.31% (23rd)	—	no fix	2024-12-23	3.0 → 3.1.5

The flaw types (CWEs) most of these CVEs share.

CWE-1336Improper Neutralization of Special Elements Used in a Template Engine2 CVEs
CWE-150Improper Neutralization of Escape, Meta, or Control Sequences1 CVEs
CWE-400Uncontrolled Resource Consumption1 CVEs
CWE-693Protection Mechanism Failure1 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.