The remote Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 24.10 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-7343-1 advisory.

    Rafal Krupinski discovered that Jinja2 did not properly restrict the execution of code in situations where     templates are used maliciously. An attacker with control over a template's filename and content could     potentially use this issue to enable the execution of arbitrary code. This issue only affected Ubuntu     14.04 LTS and Ubuntu 16.04 LTS. (CVE-2024-56201)

    It was discovered that Jinja2 sandboxed environments could be escaped through a call to a string format     method. An attacker could possibly use this issue to enable the execution of arbitrary code. This issue     only affected Ubuntu 14.04 LTS and Ubuntu 16.04 LTS. (CVE-2024-56326)

    It was discovered that Jinja2 sandboxed environments could be escaped through the malicious use of certain     filters. An attacker could possibly use this issue to enable the execution of arbitrary code.
    (CVE-2025-27516)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Red Hat Enterprise Linux CoreOS 4 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:0830 advisory.

  - podman: buildah: Container breakout by using --jobs=2 and a race condition when building a malicious     Containerfile (CVE-2024-11218)

  - jinja2: Jinja has a sandbox breakout through malicious filenames (CVE-2024-56201)

  - jinja2: Jinja has a sandbox breakout through indirect reference to format method (CVE-2024-56326)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 9 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2025-0667 advisory.

    [2.11.3-7]
    - Security fix for CVE-2024-56326     Resolves: RHEL-74690

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of python-jinja2 installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-56326 advisory.

  - Jinja is an extensible templating engine. Prior to 3.1.5, An oversight in how the Jinja sandboxed     environment detects calls to str.format allows an attacker that controls the content of a template to     execute arbitrary Python code. To exploit the vulnerability, an attacker needs to control the content of a     template. Whether that is the case depends on the type of application using Jinja. This vulnerability     impacts users of applications which execute untrusted templates. Jinja's sandbox does catch calls to     str.format and ensures they don't escape the sandbox. However, it's possible to store a reference to a     malicious string's format method, then pass that to a filter that calls it. No such filters are built-in     to Jinja, but could be present through custom filters in an application. After the fix, such indirect     calls are also handled by the sandbox. This vulnerability is fixed in 3.1.5. (CVE-2024-56326)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by a vulnerability as referenced in the ALINUX3-SA-2025:0018 advisory.

    Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities:

    CVE-2024-56326:
    Jinja is an extensible templating engine. Prior to 3.1.5, An oversight in how the Jinja sandboxed     environment detects calls to str.format allows an attacker that controls the content of a template to     execute arbitrary Python code. To exploit the vulnerability, an attacker needs to control the content of a     template. Whether that is the case depends on the type of application using Jinja. This vulnerability     impacts users of applications which execute untrusted templates. Jinja's sandbox does catch calls to     str.format and ensures they don't escape the sandbox. However, it's possible to store a reference to a     malicious string's format method, then pass that to a filter that calls it. No such filters are built-in     to Jinja, but could be present through custom filters in an application. After the fix, such indirect     calls are also handled by the sandbox. This vulnerability is fixed in 3.1.5.

Tenable has extracted the preceding description block directly from the Alibaba Cloud Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to the versions of the python-jinja2 package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

    Jinja is an extensible templating engine. Prior to 3.1.5, An oversight in how the Jinja sandboxed     environment detects calls to str.format allows an attacker that controls the content of a template to     execute arbitrary Python code. To exploit the vulnerability, an attacker needs to control the content of a     template. Whether that is the case depends on the type of application using Jinja. This vulnerability     impacts users of applications which execute untrusted templates. Jinja's sandbox does catch calls to     str.format and ensures they don't escape the sandbox. However, it's possible to store a reference to a     malicious string's format method, then pass that to a filter that calls it. No such filters are built-in     to Jinja, but could be present through custom filters in an application. After the fix, such indirect     calls are also handled by the sandbox.(CVE-2024-56326)

Tenable has extracted the preceding description block directly from the EulerOS python-jinja2 security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
232645	Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 24.10 : Jinja2 vulnerabilities (USN-7343-1)	Nessus	Ubuntu Local Security Checks	2025/3/12	2025/9/3	medium
311915	RHCOS 4 / 9 : OpenShift Container Platform 4.16.33 (RHSA-2025:0830)	Nessus	Red Hat Local Security Checks	2026/5/4	2026/5/4	medium
214569	Oracle Linux 9 : python-jinja2 (ELSA-2025-0667)	Nessus	Oracle Linux Local Security Checks	2025/1/24	2025/9/11	medium
215515	Azure Linux 3.0 Security Update: python-jinja2 (CVE-2024-56326)	Nessus	Azure Linux Local Security Checks	2025/2/10	2025/9/15	medium
236290	Alibaba Cloud Linux 3 : 0018: python-jinja2 (ALINUX3-SA-2025:0018)	Nessus	Alibaba Cloud Linux Local Security Checks	2025/5/14	2025/5/14	medium
216036	EulerOS 2.0 SP11 : python-jinja2 (EulerOS-SA-2025-1145)	Nessus	Huawei Local Security Checks	2025/2/10	2025/2/10	medium

检测

插件搜索

medium

medium

medium

medium

medium

medium