CVE-2024-56326

High

Advisory

Published 23 Dec 2024In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 7.8; base score, highest
EPSS: 0.005; 43rd percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 374; of 17,781 indexed, latest versions
Container images: 401; deployed by those charts
Fix available: 3 of 3; affected packages

Jinja has a sandbox breakout through indirect reference to format method

Carried by container images the latest versions of 374 of 17,781 indexed charts deploy, on 401 images.

Affected package	Affected versions	Fixed in	Images
jinja2pypi	2.7.2, 2.8, 2.8.1, 2.9.4+16 more	3.1.5	401
jinja2deb	2.7.2-2, 2.10.1-2, 3.0.3-1, 3.0.3-1ubuntu0.1+1 more	2.7.2-2ubuntu0.1~esm6, 2.10.1-2ubuntu0.4, 3.0.3-1ubuntu0.3	13
py3-jinja2apk	3.1.2-r2	3.1.5-r0	1

OSV records: GHSA-q2x7-8rv6-6q7h UBUNTU-CVE-2024-56326 ALPINE-CVE-2024-56326
Also known as: PYSEC-2026-1475, USN-7244-1, USN-7343-1

Charts affected

374 by stars

Chart

Latest

Affected images

Radar Score

tezos-nodetezos-node

1.0.0

1 of 4 See more

tezos-node tezos-node 1.0.0

1 of the 4 container images this version deploys carry CVE-2024-56326.

Container image	Digest	Package	Fixed in
oxheadalpha/tezos-k8s-utils :5.3.4	d9faed45bf1c	jinja2@3.0.3	3.1.5

Open the chart page →

5,321

thanhvt27-lab-k8sthanh-vt

0.1.4

1 of 5 See more

thanhvt27-lab-k8s thanh-vt 0.1.4

1 of the 5 container images this version deploys carry CVE-2024-56326.

Container image	Digest	Package	Fixed in
pysga1996/python-redis-web :latest	fdeec30ad482	jinja2@3.1.2	3.1.5

Open the chart page →

4,661

test0tohlejezkouska

0.1.0

1 of 2 See more

test0 tohlejezkouska 0.1.0

1 of the 2 container images this version deploys carry CVE-2024-56326.

Container image	Digest	Package	Fixed in
devopsjourney1/mywebapp :latest	bd1ec6838570	jinja2@3.1.2	3.1.5

Open the chart page →

3,296

synapsetranhailong

0.1.0

1 of 2 See more

synapse tranhailong 0.1.0

1 of the 2 container images this version deploys carry CVE-2024-56326.

Container image	Digest	Package	Fixed in
matrixdotorg/synapse :v1.78.0	def97fd537d8	jinja2@3.1.2	3.1.5

Open the chart page →

3,164

jupyterhubuninettsigma2

1.6.0

1 of 5 See more

jupyterhub uninettsigma2 1.6.0

1 of the 5 container images this version deploys carry CVE-2024-56326.

Container image	Digest	Package	Fixed in
quay.io/nird-toolkit/jupyterhub-server :20221215-e6aa80e	cae8c0622533	jinja2@3.1.2	3.1.5

Open the chart page →

8,607

phonebook-chartusuladams2

0.2.1

2 of 3 See more

phonebook-chart usuladams2 0.2.1

2 of the 3 container images this version deploys carry CVE-2024-56326.

Container image	Digest	Package	Fixed in
paulkellerman/resultserver-app :1.0	381eeccb0618	jinja2@3.1.2	3.1.5
paulkellerman/webserver-app :latest	5a37b74f61b9	jinja2@3.1.2	3.1.5

Open the chart page →

3,176

demo-backendv2fly

0.0.3

1 of 1 See more

demo-backend v2fly 0.0.3

1 of the 1 container images this version deploys carry CVE-2024-56326.

Container image	Digest	Package	Fixed in
quay.io/yushiwho/api :e1f9d77	e0d9b93dbf2b	jinja2@3.1.2	3.1.5

Open the chart page →

14,358

unmanicvhdirk

0.1.4

1 of 1 See more

9,347

twenty-crmvictorlane

0.0.1

1 of 3 See more

twenty-crm victorlane 0.0.1

1 of the 3 container images this version deploys carry CVE-2024-56326.

Container image	Digest	Package	Fixed in
twentycrm/twenty-postgres-spilo :latest	2f78405a78be	jinja2@3.0.3-1ubuntu0.1 jinja2@3.0.3	3.0.3-1ubuntu0.3 3.1.5

Open the chart page →

13,459

vote-appvote-app

1.0.7

1 of 6 See more

vote-app vote-app 1.0.7

1 of the 6 container images this version deploys carry CVE-2024-56326.

Container image	Digest	Package	Fixed in
thecloudspark/app-vote :1.0	c7da7417a86a	jinja2@3.1.2	3.1.5

Open the chart page →

3,031

voteappvoting-app-helm-charts-repo

1.0.0

1 of 5 See more

voteapp voting-app-helm-charts-repo 1.0.0

1 of the 5 container images this version deploys carry CVE-2024-56326.

Container image	Digest	Package	Fixed in
kodekloud/examplevotingapp_vote :v1	3a856afb02a3	jinja2@3.1.2	3.1.5

Open the chart page →

8,262

voteappvoting-app-helm-charts-repo-cloud

1.0.0

1 of 5 See more

voteapp voting-app-helm-charts-repo-cloud 1.0.0

1 of the 5 container images this version deploys carry CVE-2024-56326.

Container image	Digest	Package	Fixed in
kodekloud/examplevotingapp_vote :v1	3a856afb02a3	jinja2@3.1.2	3.1.5

Open the chart page →

8,262

wallarm-node-nextwallarm

0.5.3

1 of 2 See more

wallarm-node-next wallarm 0.5.3

1 of the 2 container images this version deploys carry CVE-2024-56326.

Container image	Digest	Package	Fixed in
wallarm/node-helpers :5.0.2-1	097cadc42336	jinja2@3.1.4	3.1.5

Open the chart page →

2,408

wazuh-manager-filebeatwazuh-manager-filebeat

0.1.0-gamma

1 of 1 See more

wazuh-manager-filebeat wazuh-manager-filebeat 0.1.0-gamma

1 of the 1 container images this version deploys carry CVE-2024-56326.

Container image	Digest	Package	Fixed in
iosifache/wazuh-manager-filebeat :latest	85df3f04b5da	jinja2@2.11.3	3.1.5

Open the chart page →

11,119

supersetwbstack

0.1.0

1 of 1 See more

superset wbstack 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-56326.

Container image	Digest	Package	Fixed in
apache/superset :4.0.1	ab9467fd712c	jinja2@3.1.3	3.1.5

Open the chart page →

7,085

weather-chartweather-web-app

0.1.0

1 of 1 See more

weather-chart weather-web-app 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-56326.

Container image	Digest	Package	Fixed in
zohardocker12/weather_app_flask :latest	b86d60dbb68d	jinja2@3.0.3	3.1.5

Open the chart page →

2,670

welcome-elos-webappwelcome-elos-webapp

2.0.0

1 of 1 See more

welcome-elos-webapp welcome-elos-webapp 2.0.0

1 of the 1 container images this version deploys carry CVE-2024-56326.

Container image	Digest	Package	Fixed in
pococze/python-hello-elos :2.0.0	7a1aab425e51	jinja2@3.1.4	3.1.5

Open the chart page →

2,678

ambassadorwenerme

6.9.5

1 of 2 See more

ambassador wenerme 6.9.5

1 of the 2 container images this version deploys carry CVE-2024-56326.

Container image	Digest	Package	Fixed in
datawire/aes :1.14.4	8588eafe6862	jinja2@2.11.2	3.1.5

Open the chart page →

4,086

emissary-ingresswenerme

8.12.2

1 of 2 See more

emissary-ingress wenerme 8.12.2

1 of the 2 container images this version deploys carry CVE-2024-56326.

Container image	Digest	Package	Fixed in
datawire/emissary :3.12.2	1f67a1292d2a	jinja2@3.1.4	3.1.5

Open the chart page →

10,843

ceph-csi-cephfswikimedia

0.1.8

1 of 5 See more

ceph-csi-cephfs wikimedia 0.1.8

1 of the 5 container images this version deploys carry CVE-2024-56326.

Container image	Digest	Package	Fixed in
quay.io/cephcsi/cephcsi :v3.7.2	f7f8228f17cc	jinja2@2.10.1	3.1.5

Open the chart page →

10,285

ceph-csi-rbdwikimedia

0.1.13

1 of 6 See more

ceph-csi-rbd wikimedia 0.1.13

1 of the 6 container images this version deploys carry CVE-2024-56326.

Container image	Digest	Package	Fixed in
quay.io/cephcsi/cephcsi :v3.7.2	f7f8228f17cc	jinja2@2.10.1	3.1.5

Open the chart page →

11,784

powerdnsadminwitcom-gmbh

0.3.4

1 of 1 See more

powerdnsadmin witcom-gmbh 0.3.4

1 of the 1 container images this version deploys carry CVE-2024-56326.

Container image	Digest	Package	Fixed in
ngoduykhanh/powerdns-admin :v0.2.4	ba36ab196d3d	jinja2@3.0.2	3.1.5

Open the chart page →

2,643

xkopsxkops

0.1.0

1 of 5 See more

xkops xkops 0.1.0

1 of the 5 container images this version deploys carry CVE-2024-56326.

Container image	Digest	Package	Fixed in
hamzaarshad10/querybackend :1.6.2	2c1c3b86a8e7	jinja2@3.1.4	3.1.5

Open the chart page →

13,677

zahori-serverzahori

1.0.1

1 of 2 See more

zahori-server zahori 1.0.1

1 of the 2 container images this version deploys carry CVE-2024-56326.

Container image	Digest	Package	Fixed in
flyway/flyway :9.14.1-alpine	80f12c80502b	jinja2@3.1.2	3.1.5

Open the chart page →

5,846

Container images carrying it

401 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

Container image	Digest	Package	Fixed in	Used by
clsen2024/daejeon_2-3 :latest	1156cd87c8fb	jinja2@3.1.4	3.1.5	1
clsen2024/gwangju_2-3 :service-b-1	0ba9eff852c5	jinja2@3.1.4	3.1.5	1
clsen2024/gwangju_2-3 :service-a-1	51b1d45961cd	jinja2@3.1.4	3.1.5	1
clsen2024/gwangju_2-3 :service-c-1	efb1586c8299	jinja2@3.1.4	3.1.5	1
codecov/self-hosted-worker :24.4.1	837f546b479b	jinja2@3.1.3	3.1.5	1
confluentinc/cp-enterprise-control-center :6.1.0	f2975d507a2a	jinja2@2.11.2	3.1.5	1
confluentinc/cp-enterprise-kafka :6.1.0	8f1544df1f48	jinja2@2.11.2	3.1.5	1
confluentinc/cp-kafka :5.4.0	1bbda887bc53	jinja2@2.9.6	3.1.5	1
confluentinc/cp-kafka :7.1.2.amd64	3bf359d5e340	jinja2@2.11.3	3.1.5	1
confluentinc/cp-kafka :7.8.0-3-ubi8	adc392d28a1e	jinja2@3.1.4	3.1.5	1
confluentinc/cp-kafka :7.4.4	c0224a1adf7a	jinja2@2.11.3	3.1.5	1
confluentinc/cp-kafka :5.0.1	c87b1c07fb53	jinja2@2.9.6	3.1.5	1
confluentinc/cp-kafka :7.5.1	dc9b972db002	jinja2@2.11.3	3.1.5	1
confluentinc/cp-kafka-connect :6.1.0	4bc70a83ca6f	jinja2@2.11.2	3.1.5	1
confluentinc/cp-kafka-rest :6.1.0	b0b7aa26254a	jinja2@2.11.2	3.1.5	1
confluentinc/cp-ksqldb-server :7.6.0	8ec46c27982f	jinja2@3.1.3	3.1.5	1
confluentinc/cp-ksqldb-server :6.1.0	ee403d5b9090	jinja2@2.11.2	3.1.5	1
confluentinc/cp-schema-registry :6.1.0	b651d4b6185a	jinja2@2.11.2	3.1.5	1
confluentinc/cp-zookeeper :7.5.1	0bec03c1f3ce	jinja2@2.11.3	3.1.5	1
confluentinc/cp-zookeeper :7.8.0-3-ubi8	5ca5f3269814	jinja2@3.1.4	3.1.5	1
confluentinc/cp-zookeeper :6.1.0	78c190f4472c	jinja2@2.11.2	3.1.5	1
craigwillis/c2metadata-bd :latest	ae317d7e4724	jinja2@2.11.2	3.1.5	1
danuk/telegram-sender :0.0.1	026560388070	jinja2@3.1.2	3.1.5	1
daskdev/dask :1.1.0	4ecd7bc35500	jinja2@2.10	3.1.5	1
daskdev/dask-notebook :1.1.0	052630f5ca04	jinja2@2.10	3.1.5	1
datawire/aes :2.0.3-ea	07f8fe4f4f8e	jinja2@2.11.2	3.1.5	1
datawire/aes :1.13.6	2beb65062c8b	jinja2@2.11.2	3.1.5	1
datawire/aes :3.11.1	95ec30b3c732	jinja2@3.1.4	3.1.5	1
datawire/emissary :3.12.2	1f67a1292d2a	jinja2@3.1.4	3.1.5	1
datawire/emissary :2.0.2-ea	9716efbdd24b	jinja2@2.11.2	3.1.5	1
ddosify/selfhosted_hammermanager :1.2.4	71b8768f49bc	jinja2@3.1.3	3.1.5	1
deepflowce/deepflow-app :v6.2.6.5	a1888d35e787	jinja2@2.11.3	3.1.5	1
devopsgoofy/k8s-platform :latest	ad865312099f	jinja2@3.1.2	3.1.5	1
devopstales/kube-openid-connector :1.0	42c40a0e9f1b	jinja2@3.1.1	3.1.5	1
dinutac/jinja2docker :2.1.8	9340dde8a8a4	jinja2@3.1.2	3.1.5	1
douz/helpdesk :latest	4384103d0219	jinja2@3.1.2	3.1.5	1
dpage/pgadmin4 :8.4	18cd5711fc9a	jinja2@3.1.3	3.1.5	1
dpage/pgadmin4 :7.5	37946e4f3e7b	jinja2@3.1.2	3.1.5	1
dpage/pgadmin4 :8.13	561c1f8f99f2	jinja2@3.1.4	3.1.5	1
dpage/pgadmin4 :4.5	a5a656e1d5fd	jinja2@2.10.1	3.1.5	1
dpage/pgadmin4 :4.22	b1f00b8163cf	jinja2@2.11.2	3.1.5	1
drgrove/mtls-server :v0.14.2	361721759a2b	jinja2@2.10.1	3.1.5	1
dysnix/pritunl :v1.29-r8	19951e3e7a32	jinja2@2.10.1	3.1.5	1
elastichq/elasticsearch-hq :latest	bb3bd22c2b87	jinja2@2.10.3	3.1.5	1
errbotio/errbot :6.1.9	00ee4e0953ab	jinja2@3.0.3	3.1.5	1
evk02/mlflow :2.2.1	ef6ff257ef35	jinja2@3.1.2	3.1.5	1
factly/hunting :0.2.0-stagv1.2	ca5bc71d1d5c	jinja2@3.1.2	3.1.5	1
fiware/bae-activation-service :v0.0.3	3e3ec88d59ed	jinja2@2.11.2	3.1.5	1
fiware/ishare-satellite :1.2.0	c3c1c8ccfb45	jinja2@3.1.2	3.1.5	1
flagsmith/flagsmith-api :v2.6.0	fd58556339a4	jinja2@2.11.2	3.1.5	1