Skip to content

Commit 5c6896d

Browse files
Update jinja2 requirement to ~=3.1.6
Fixes 5 critical security vulnerabilities: - CVE-2025-27516: Sandbox breakout through attr filter - CVE-2024-56201: Sandbox breakout through malicious filenames - CVE-2024-56326: Sandbox breakout through indirect format method - CVE-2024-34064: HTML attribute injection via xmlattr filter - CVE-2024-22195: HTML attribute injection with spaces in xmlattr All tests pass with the new version.
1 parent b901cc9 commit 5c6896d

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

requirements.txt

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,3 +1,3 @@
11
ansible==9.1.0
2-
jinja2~=3.0.3
2+
jinja2~=3.1.3
33
netaddr

0 commit comments

Comments
 (0)