Lucene search
Https://gitlab.com/gitlab-org/security-products/gemnasium-dbGITLAB-2B9F06DA84CB3AA272E072E600CA944EHistoryFeb 01, 2021 - 12:00 a.m.
Regular Expression Denial of Service
2021-02-0100:00:00
https://gitlab.com/gitlab-org/security-products/gemnasium-db
gitlab.com
14
0.002 Low
EPSS
Percentile
57.4%
The ReDOS vulnerability of the regex is mainly due to the sub-pattern [a-zA-Z0-9._-]+.[a-zA-Z0-9._-]+ This issue can be mitigated by Markdown to format user content instead of the urlize filter, or by implementing request timeouts and limiting process memory.
| CPE | Name | Operator | Version |
|---|---|---|---|
| pypi/jinja2 | lt | 2.11.3 |
References
Related
rocky
rocky
python-jinja2 security update
2021-11-09 08:26:43
python27:2.7 security update
2021-11-09 08:24:39
python38:3.8 and python38-devel:3.8 security update
2021-11-09 12:47:54
nessus
nessus
SUSE SLES11 Security Update : python-Jinja2 (SUSE-SU-2021:14644-1)
2021-06-10 00:00:00
EulerOS Virtualization 3.0.2.0 : python-jinja2 (EulerOS-SA-2021-2840)
2021-12-29 00:00:00
EulerOS Virtualization 3.0.6.6 : python-jinja2 (EulerOS-SA-2022-1140)
2022-02-12 00:00:00
osv
osv
CVE-2020-28493
2021-02-01 20:15:12
PYSEC-2021-66
2021-02-01 20:15:00
Regular Expression Denial of Service (ReDoS) in Jinja2
2021-03-19 21:28:05
openvas
openvas
Huawei EulerOS: Security Advisory for python-jinja2 (EulerOS-SA-2021-2788)
2021-11-17 00:00:00
Huawei EulerOS: Security Advisory for python-jinja2 (EulerOS-SA-2021-2562)
2021-09-28 00:00:00
Huawei EulerOS: Security Advisory for python-jinja2 (EulerOS-SA-2021-2840)
2021-12-30 00:00:00
ubuntu
ubuntu
Jinja2 vulnerability
2022-10-26 00:00:00
Jinja2 vulnerabilities
2024-01-25 00:00:00
redhat
redhat
(RHSA-2021:4161) Moderate: python-jinja2 security update
2021-11-09 08:26:43
(RHSA-2021:4151) Moderate: python27:2.7 security update
2021-11-09 08:24:39
(RHSA-2021:3252) Moderate: python27 security update
2021-08-24 07:29:51
fedora
fedora
[SECURITY] Fedora 33 Update: mingw-python-jinja2-2.11.3-1.fc33
2021-03-15 01:19:56
ubuntucve
ubuntucve
CVE-2020-28493
2021-02-01 00:00:00
redhatcve
redhatcve
CVE-2020-28493
2021-02-15 12:33:42
alpinelinux
alpinelinux
CVE-2020-28493
2021-02-01 20:15:12
nvd
nvd
CVE-2020-28493
2021-02-01 20:15:12
cve
cve
CVE-2020-28493
2021-02-01 20:15:12
ibm
ibm
Security Bulletin: IBM Security QRadar Network Threat Analytics uses component jinja2 with a denial of service vulnerability (CVE-2020-28493)
2022-09-16 15:41:17
archlinux
archlinux
[ASA-202102-19] python-jinja: denial of service
2021-02-07 00:00:00
[ASA-202102-20] python2-jinja: denial of service
2021-02-07 00:00:00
gentoo
gentoo
Jinja: Denial of service
2021-07-08 00:00:00
debiancve
debiancve
CVE-2020-28493
2021-02-01 20:15:12
veracode
veracode
Regular Expression Denial Of Service (ReDoS)
2021-02-02 01:28:40
prion
prion
Design/Logic Flaw
2021-02-01 20:15:00
github
github
Regular Expression Denial of Service (ReDoS) in Jinja2
2021-03-19 21:28:05
mageia
mageia
Updated python-jinja2 packages fix a security vulnerability
2021-04-12 22:59:59
cbl_mariner
cbl_mariner
CVE-2020-28493 affecting package python-jinja2 2.10.1-1
2022-08-12 16:45:07
cvelist
cvelist
CVE-2020-28493 Regular Expression Denial of Service (ReDoS)
2021-02-01 00:00:00
almalinux
almalinux
Moderate: python-jinja2 security update
2021-11-09 08:26:43
Moderate: python27:2.7 security update
2021-11-09 08:24:39
Moderate: python38:3.8 and python38-devel:3.8 security update
2021-11-09 12:47:54
oraclelinux
oraclelinux
python27:2.7 security update
2021-11-16 00:00:00
python38:3.8 and python38-devel:3.8 security update
2021-11-16 00:00:00
oracle
oracle
Oracle Critical Patch Update Advisory - October 2023
2023-10-17 00:00:00