PyPI/skyvern CVE-2025-49619: high 8.5, EPSS 21.81%
Skyvern has a Jinja runtime leak
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 0.2.0 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-h92g-3xc3-ww2r
- https://nvd.nist.gov/vuln/detail/CVE-2025-49619
- https://github.com/Skyvern-AI/skyvern/commit/db856cd8433a204c8b45979c70a4da1e119d949d
- https://cristibtz.blog/posts/CVE-2025-49619
- https://cristibtz.github.io/posts/CVE-2025-49619
- https://github.com/Skyvern-AI/skyvern
- https://www.exploit-db.com/exploits/52335
CVE-2025-49619 · published · modified · JSON