New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Jinja2 vulnerability patch request #526

Open

dralexxx opened this issue Feb 10, 2024 · 0 comments

Labels

Request for enhancement

Contributor

dralexxx commented Feb 10, 2024

Is your feature request related to a problem? Please describe.

Jinja2 3.1.2 has a medium-level vulnerability which allows for a cross-site scripting attack to occur.
Source: https://security.snyk.io/package/pip/Jinja2/3.1.2
Source: https://dev.to/snyk/understanding-and-mitigating-the-jinja2-xss-vulnerability-cve-2024-22195-1f2m

This should be patched at source, as it will be picked up and highlighted in software vulnerability scanning software.

Describe the solution you'd like

Update Jinja2 pipfile dependency version from 3.1.2 to version 3.1.3 to mitigate the issue.

Describe alternatives you've considered

N/A

Additional context

N/A

dralexxx added the Request for enhancement label

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment