{"id":"CVE-2024-22195","aliases":["GHSA-h5c8-rqwp-cp95","PYSEC-2026-1473"],"title":"Jinja vulnerable to HTML attribute injection when passing user input as keys to xmlattr filter","summary":"Jinja vulnerable to HTML attribute injection when passing user input as keys to xmlattr filter","severity":"medium","cvss":5.4,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N","vendor":"jinja2","product":"jinja2","ecosystem":"pip","affected":["jinja2 < 3.1.3"],"patched":["jinja2 3.1.3"],"published":"2024-01-11","updated":"2026-09-10","sourceUpdated":"2026-09-10T03:50:00.236017440Z","source":"OSV","sourceUrl":"https://osv.dev/vulnerability/GHSA-h5c8-rqwp-cp95","references":[{"url":"https://github.com/pallets/jinja/security/advisories/GHSA-h5c8-rqwp-cp95"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-22195"},{"url":"https://github.com/pallets/jinja/commit/716795349a41d4983a9a4771f7d883c96ea17be7"},{"url":"https://github.com/pallets/jinja"},{"url":"https://github.com/pallets/jinja/releases/tag/3.1.3"},{"url":"https://lists.debian.org/debian-lts-announce/2024/01/msg00010.html"},{"url":"https://lists.debian.org/debian-lts-announce/2024/12/msg00009.html"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/5XCWZD464AJJJUBOO7CMPXQ4ROBC6JX2"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DELCVUUYX75I5K4Q5WMJG4MUZJA6VAIP"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/O7YWRBX6JQCWC2XXCTZ55C7DPMGICCN3"},{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-22195.json"},{"url":"https://access.redhat.com/security/cve/CVE-2024-22195"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2257854"},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-22195"},{"url":"https://access.redhat.com/errata/RHSA-2024:1057"},{"url":"https://access.redhat.com/errata/RHSA-2024:1640"},{"url":"https://access.redhat.com/errata/RHSA-2024:1878"},{"url":"https://access.redhat.com/errata/RHSA-2024:1536"},{"url":"https://access.redhat.com/errata/RHSA-2024:2010"},{"url":"https://access.redhat.com/errata/RHSA-2024:3927"},{"url":"https://access.redhat.com/errata/RHSA-2024:2733"},{"url":"https://access.redhat.com/errata/RHSA-2024:2987"},{"url":"https://access.redhat.com/errata/RHSA-2024:2968"},{"url":"https://access.redhat.com/errata/RHSA-2024:3102"},{"url":"https://access.redhat.com/errata/RHBA-2024:1398"},{"url":"https://access.redhat.com/errata/RHBA-2024:1114"},{"url":"https://access.redhat.com/errata/RHBA-2024:1416"},{"url":"https://access.redhat.com/errata/RHBA-2024:0891"},{"url":"https://access.redhat.com/errata/RHSA-2024:1155"},{"url":"https://access.redhat.com/errata/RHBA-2024:1091"},{"url":"https://access.redhat.com/errata/RHBA-2024:1137"},{"url":"https://access.redhat.com/errata/RHSA-2024:2132"},{"url":"https://access.redhat.com/errata/RHSA-2024:2348"}],"tags":["osv","pip","csaf","vex","red-hat"],"epss":0.00892,"epssPercentile":0.57936,"cwe":["CWE-79"],"ingestedAt":"2026-07-08T18:25:49.981Z","slug":"CVE-2024-22195","body":"## Overview\n\nThe `xmlattr` filter in affected versions of Jinja accepts keys containing spaces. XML/HTML attributes cannot contain spaces, as each would then be interpreted as a separate attribute. If an application accepts keys (as opposed to only values) as user input, and renders these in pages that other users see as well, an attacker could use this to inject other attributes and perform XSS. Note that accepting keys as user input is not common or a particularly intended use case of the `xmlattr` filter, and an application doing so should already be verifying what keys are provided regardless of this fix.\n\n## Affected packages\n\n- `jinja2 < 3.1.3`\n\n## Remediation\n\nUpgrade to a patched release:\n\n- `jinja2 3.1.3`\n\n## Vendor advisories\n\n- **RHSA-2024:1057** · Red Hat · fixed in: Red Hat Ansible Automation Platform 2.4 for RHEL 8, Red Hat Ansible Automation Platform 2.4 for RHEL 9 · released 2024-02-29 · [advisory](https://access.redhat.com/errata/RHSA-2024:1057)\n- **RHSA-2024:1640** · Red Hat · fixed in: Red Hat Ansible Automation Platform 2.4 for RHEL 8, Red Hat Ansible Automation Platform 2.4 for RHEL 9 · released 2024-04-02 · [advisory](https://access.redhat.com/errata/RHSA-2024:1640)\n- **RHSA-2024:1878** · Red Hat · fixed in: RHUI 4 for RHEL 8 · released 2024-04-18 · [advisory](https://access.redhat.com/errata/RHSA-2024:1878)\n- **RHSA-2024:1536** · Red Hat · fixed in: Red Hat Satellite 6.14 for RHEL 8 · released 2024-03-27 · [advisory](https://access.redhat.com/errata/RHSA-2024:1536)\n- **RHSA-2024:2010** · Red Hat · fixed in: Red Hat Satellite 6.15 for RHEL 8 · released 2024-04-23 · [advisory](https://access.redhat.com/errata/RHSA-2024:2010)\n- **RHSA-2024:3927** · Red Hat · fixed in: Red Hat Ceph Storage 7.1 Tools · released 2024-06-13 · [advisory](https://access.redhat.com/errata/RHSA-2024:3927)\n- **RHSA-2024:2733** · Red Hat · fixed in: Red Hat OpenStack Platform 17.1 · released 2024-05-22 · [advisory](https://access.redhat.com/errata/RHSA-2024:2733)\n- **RHSA-2024:2987** · Red Hat · fixed in: Red Hat Enterprise Linux AppStream (v. 8) · released 2024-05-22 · [advisory](https://access.redhat.com/errata/RHSA-2024:2987)\n- **RHSA-2024:2968** · Red Hat · fixed in: Red Hat Enterprise Linux AppStream (v. 8), Red Hat Enterprise Linux HighAvailability (v. 8), Red Hat Enterprise Linux ResilientStorage (v. 8) · released 2024-05-22 · [advisory](https://access.redhat.com/errata/RHSA-2024:2968)\n- **RHSA-2024:3102** · Red Hat · fixed in: Red Hat Enterprise Linux AppStream (v. 8) · released 2024-05-22 · [advisory](https://access.redhat.com/errata/RHSA-2024:3102)\n- **RHBA-2024:1398** · Red Hat · fixed in: Red Hat Enterprise Linux AppStream AUS (v.8.4), Red Hat Enterprise Linux AppStream E4S (v.8.4), Red Hat Enterprise Linux AppStream TUS (v.8.4), Red Hat Enterprise Linux High Availability AUS (v.8.4), Red Hat Enterprise Linux HighAvailability E4S (v.8.4), Red Hat Enterprise Linux HighAvailability TUS (v.8.4) · released 2024-03-19 · [advisory](https://access.redhat.com/errata/RHBA-2024:1398)\n- **Red Hat VEX** · Moderate · affected: Red Hat Ansible Automation Platform 1.2, Red Hat Ceph Storage 5, Red Hat Ceph Storage 6, Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7, Red Hat Quay 3, … · no fix planned: Red Hat Ansible Automation Platform 1.2, Red Hat Ceph Storage 5, Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7, … · updated 2026-09-08 · [vex](https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-22195.json)","depth":"sunlit","depthScore":30,"depthScoreParts":{"impact":29.7,"likelihood":0.2,"exploitation":0,"ransomware":0},"changes":[]}