According to the versions of the python-jinja2 package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

    Jinja is an extensible templating engine. Prior to 3.1.6, an oversight in how the Jinja sandboxed     environment interacts with the |attr filter allows an attacker that controls the content of a template to     execute arbitrary Python code. To exploit the vulnerability, an attacker needs to control the content of a     template. Whether that is the case depends on the type of application using Jinja. This vulnerability     impacts users of applications which execute untrusted templates. Jinja's sandbox does catch calls to     str.format and ensures they don't escape the sandbox. However, it's possible to use the |attr filter to     get a reference to a string's plain format method, bypassing the sandbox. After the fix, the |attr filter     no longer bypasses the environment's attribute lookup. This vulnerability is fixed in     3.1.6.(CVE-2025-27516)

Tenable has extracted the preceding description block directly from the EulerOS python-jinja2 security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:3160 advisory.

    Red Hat Ansible Automation Platform provides an enterprise framework for building, deploying and managing     IT automation at scale. IT Managers can provide top-down guidelines on how automation is applied to     individual teams, while automation developers retain the freedom to write tasks that leverage existing     knowledge without the overhead. Ansible Automation Platform makes it possible for users across an     organization to share, vet, and manage automation content by means of a simple, powerful, and agentless     language.

    Security Fix(es):

    * automation-controller: Jinja sandbox breakout through attr filter selecting format method     (CVE-2025-27516)

    * python3.11-jinja2: Jinja sandbox breakout through attr filter selecting format method (CVE-2025-27516)

    * python3.11-django: Potential denial-of-service vulnerability in django.utils.text.wrap()     (CVE-2025-26699)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Updates and fixes included:

    Automation Platform
    * Fixed an issue when migrating user accounts with invalid email addresses, the process would print a     message showing the user name of the user whose email address has been removed (AAP-42146)
    * When migrating user accounts with invalid email addresses the process will print a message showing the     user name of the user whose email address has been removed (AAP-41675)
    * automation-gateway has been updated to 2.5.20250326
    * python3.11-django-ansible-base has been updated to 2.5.20250326

    Automation controller
    * Fixed the host metrics to no longer collect host metrics for dark/unreachable hosts (AAP-41567)
    * Removed ANSIBLE_COLLECTIONS_PATHS from the controllers job output due to the discontinuation of     ansible-engine 2.9 (AAP-41566)
    * Fixed the system auditor to no longer download the execution node install bundle (AAP-37922)
    * Fixed host records to no longer be added to the HostMetric if the host had only failures or unreachable     tasks done (AAP-32094)
    * automation-controller has been updated to 4.6.10

    Automation hub
    * Fixed an issue where the user could not delete automation hub teams on the resource API (AAP-42158)
    * Added a migration file to set the default value of retain_repo_versions to 1 for validated repositories     (AAP-42005)
    * automation-hub has been updated to 4.10.3
    * python3.11-galaxy-ng has been updated to 4.10.3
    * python3.11-pulpcore has been updated to 3.49.34

    RPM-based Ansible Automation Platform
    * Fixed issue where preflight was not accounting for automationgateway being a CA server node (AAP-41817)
    * Fixed gateway installations which resulted in failures in environments with IPv6 due to nginx     configuration timing (AAP-41816)
    * ansible-automation-platform-installer and installer setup have been updated to 2.5-10

    Additional changes:
    * python3.11-django has been updated to 4.2.20
    * python3.11-jinja2 has been updated to 3.1.6

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2025:0233 advisory.

    Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:

    CVE-2025-27516:
    Jinja is an extensible templating engine. Prior to 3.1.6, an oversight in how the Jinja sandboxed     environment interacts with the |attr filter allows an attacker that controls the content of a template to     execute arbitrary Python code. To exploit the vulnerability, an attacker needs to control the content of a     template. Whether that is the case depends on the type of application using Jinja. This vulnerability     impacts users of applications which execute untrusted templates. Jinja's sandbox does catch calls to     str.format and ensures they don't escape the sandbox. However, it's possible to use the |attr filter to     get a reference to a string's plain format method, bypassing the sandbox. After the fix, the |attr filter     no longer bypasses the environment's attribute lookup. This vulnerability is fixed in 3.1.6.

Tenable has extracted the preceding description block directly from the Tencent Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2025:0307 advisory.

    Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:

    CVE-2025-27516:
    Jinja is an extensible templating engine. Prior to 3.1.6, an oversight in how the Jinja sandboxed     environment interacts with the |attr filter allows an attacker that controls the content of a template to     execute arbitrary Python code. To exploit the vulnerability, an attacker needs to control the content of a     template. Whether that is the case depends on the type of application using Jinja. This vulnerability     impacts users of applications which execute untrusted templates. Jinja's sandbox does catch calls to     str.format and ensures they don't escape the sandbox. However, it's possible to use the |attr filter to     get a reference to a string's plain format method, bypassing the sandbox. After the fix, the |attr filter     no longer bypasses the environment's attribute lookup. This vulnerability is fixed in 3.1.6.

Tenable has extracted the preceding description block directly from the Tencent Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote NewStart CGSL host, running version MAIN 7.02, has python-jinja2 packages installed that are affected by multiple vulnerabilities:

  - Jinja is an extensible templating engine. Prior to 3.1.5, An oversight in how the Jinja sandboxed     environment detects calls to str.format allows an attacker that controls the content of a template to     execute arbitrary Python code. To exploit the vulnerability, an attacker needs to control the content of a     template. Whether that is the case depends on the type of application using Jinja. This vulnerability     impacts users of applications which execute untrusted templates. Jinja's sandbox does catch calls to     str.format and ensures they don't escape the sandbox. However, it's possible to store a reference to a     malicious string's format method, then pass that to a filter that calls it. No such filters are built-in     to Jinja, but could be present through custom filters in an application. After the fix, such indirect     calls are also handled by the sandbox. This vulnerability is fixed in 3.1.5. (CVE-2024-56326)

  - Jinja is an extensible templating engine. In versions on the 3.x branch prior to 3.1.5, a bug in the Jinja     compiler allows an attacker that controls both the content and filename of a template to execute arbitrary     Python code, regardless of if Jinja's sandbox is used. To exploit the vulnerability, an attacker needs to     control both the filename and the contents of a template. Whether that is the case depends on the type of     application using Jinja. This vulnerability impacts users of applications which execute untrusted     templates where the template author can also choose the template filename. This vulnerability is fixed in     3.1.5. (CVE-2024-56201)

  - Jinja is an extensible templating engine. The `xmlattr` filter in affected versions of Jinja accepts keys     containing non-attribute characters. XML/HTML attributes cannot contain spaces, `/`, `>`, or `=`, as each     would then be interpreted as starting a separate attribute. If an application accepts keys (as opposed to     only values) as user input, and renders these in pages that other users see as well, an attacker could use     this to inject other attributes and perform XSS. The fix for CVE-2024-22195 only addressed spaces but not     other characters. Accepting keys as user input is now explicitly considered an unintended use case of the     `xmlattr` filter, and code that does so without otherwise validating the input should be flagged as     insecure, regardless of Jinja version. Accepting _values_ as user input continues to be safe. This     vulnerability is fixed in 3.1.4. (CVE-2024-34064)

  - Jinja is an extensible templating engine. Prior to 3.1.6, an oversight in how the Jinja sandboxed     environment interacts with the |attr filter allows an attacker that controls the content of a template to     execute arbitrary Python code. To exploit the vulnerability, an attacker needs to control the content of a     template. Whether that is the case depends on the type of application using Jinja. This vulnerability     impacts users of applications which execute untrusted templates. Jinja's sandbox does catch calls to     str.format and ensures they don't escape the sandbox. However, it's possible to use the |attr filter to     get a reference to a string's plain format method, bypassing the sandbox. After the fix, the |attr filter     no longer bypasses the environment's attribute lookup. This vulnerability is fixed in 3.1.6.
    (CVE-2025-27516)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
241803	EulerOS 2.0 SP10 : python-jinja2 (EulerOS-SA-2025-1787)	Nessus	Huawei Local Security Checks	7/10/2025	7/10/2025	medium
242462	EulerOS 2.0 SP12 : python-jinja2 (EulerOS-SA-2025-1839)	Nessus	Huawei Local Security Checks	7/21/2025	7/21/2025	medium
233518	RHEL 8 / 9 : Red Hat Ansible Automation Platform 2.5 Product Security and Bug Fix Update (Important) (RHSA-2025:3160)	Nessus	Red Hat Local Security Checks	3/29/2025	6/5/2025	medium
239678	TencentOS Server 4: python-jinja2 (TSSA-2025:0233)	Nessus	Tencent Local Security Checks	6/16/2025	11/20/2025	medium
238970	TencentOS Server 3: python-jinja2 (TSSA-2025:0307)	Nessus	Tencent Local Security Checks	6/16/2025	11/20/2025	medium
237990	NewStart CGSL MAIN 7.02 : python-jinja2 Multiple Vulnerabilities (NS-SA-2025-0076)	Nessus	NewStart CGSL Local Security Checks	6/9/2025	6/18/2025	medium

Detections

Analytics

Plugins Search

medium

medium

medium

medium

medium

medium