Sploitus

19 exploited vulnerabilities in Jinja2

Vulnerabilities with publicly known exploits

Vendors
Unknown, Pypi, Jinja2, Mlflow, Ansible, Celery
With known exploits
19
Affected Jupyter Enterprise Gateway versions
< 3.3.0, 2.0.0
Affected Lfprojects Mlflow versions
< 2.9.2
Affected fit2cloud Jumpserver versions
< 3.10.7
Affected Wix Jam versions
< 2018-03-27
Affected Pocoo jinja2 versions
= 2.10, 2.7.2
Affected Bentoml versions
< 1.4.38
Affected Ethyca Fides versions
< 2.44.0
Affected Vault-cli Project Vault-cli versions
< 3.0.0

Vulnerabilities with exploits

Highest CVSS first — 5 of these already have exploit code on Sploitus

CVE-2026-44181
CVSS 10.0 CRITICAL 2026-06-03FIX AVAILABLE
CVE-2024-32651 8 exploits
CVSS 10.0 CRITICAL 2024-04-25
CVE-2023-6709
CVSS 10.0 CRITICAL 2023-12-11FIX AVAILABLE
CVE-2024-29202
CVSS 9.9 CRITICAL 2024-03-29FIX AVAILABLE
CVE-2025-3841
CVSS 9.8 CRITICAL 2025-04-21
CVE-2019-8341 5 exploits
CVSS 9.8 CRITICAL 2019-02-15
CVE-2026-35044
CVSS 9.6 CRITICAL 2026-04-03FIX AVAILABLE
CVE-2024-34359 8 exploits
CVSS 9.6 CRITICAL 2024-05-10FIX AVAILABLE
CVE-2024-45053
CVSS 9.1 CRITICAL 2024-09-04FIX AVAILABLE
CVE-2021-43837
CVSS 9.1 CRITICAL 2021-12-16FIX AVAILABLE
CVE-2025-1040
CVSS 8.8 HIGH 2025-03-20FIX AVAILABLE
CVE-2026-33154 1 exploit
CVSS 8.1 HIGH 2026-03-18FIX AVAILABLE
CVE-2024-56363
CVSS 7.8 HIGH 2024-12-23FIX AVAILABLE
CVE-2024-41950
CVSS 7.5 HIGH 2024-07-31FIX AVAILABLE
CVE-2025-49142
CVSS 7.1 HIGH 2025-06-10FIX AVAILABLE
CVE-2020-28493
CVSS 5.3 MEDIUM 2021-02-01FIX AVAILABLE
CVE-2014-0012
CVSS 4.4 MEDIUM 2014-05-19FIX AVAILABLE
CVE-2024-22195 1 exploit
CVSS 6.1 MEDIUM 2024-01-10
CVE-2025-3804
CVSS 5.3 MEDIUM 2025-04-19FIX AVAILABLE