{"action":"Upgrade py3-jinja2 to 3.1.3-r0 or later.","affected":[{"fixed":"3.1.3-r0","introduced":"0"}],"component":"py3-jinja2","cve_ids":[],"ecosystem":"Alpine","ecosystem_qualifier":"Alpine:v3.20","exploited":false,"fixed_versions":["3.1.3-r0"],"id":"tcs_01M5NF02ADEAMFRCCHDGQ3KGA2","modified_at":"2026-09-15T08:17:48.444115048Z","published_at":"2024-01-11T03:15:11.200Z","references":["https://osv.dev/vulnerability/ALPINE-CVE-2024-22195","https://security.alpinelinux.org/vuln/CVE-2024-22195"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"ALPINE-CVE-2024-22195#Alpine:v3.20/py3-jinja2","url":"https://osv.dev/vulnerability/ALPINE-CVE-2024-22195"}],"summary":"Jinja is an extensible templating engine. Special placeholders in the template allow writing code similar to Python syntax. It is possible to inject arbitrary HTML attributes into the rendered HTML te"}