Skip to content

3.1.4

Latest
Latest
Compare
Choose a tag to compare
@github-actions github-actions released this 05 May 23:42
· 119 commits to main since this release
3.1.4
This tag was signed with the committer’s verified signature.
davidism David Lord
GPG key ID: 7A1C87E3F5BC42A8
Learn about vigilant mode.
dd4a8b5
This commit was signed with the committer’s verified signature.
davidism David Lord
GPG key ID: 7A1C87E3F5BC42A8
Learn about vigilant mode.

This is the Jinja 3.1.4 security release, which fixes security issues and bugs but does not otherwise change behavior and should not result in breaking changes.

PyPI: https://pypi.org/project/Jinja2/3.1.4/
Changes: https://jinja.palletsprojects.com/en/3.1.x/changes/#version-3-1-4

  • The xmlattr filter does not allow keys with / solidus, > greater-than sign, or = equals sign, in addition to disallowing spaces. Regardless of any validation done by Jinja, user input should never be used as keys to this filter, or must be separately validated first. GHSA-h75v-3vvj-5mfj
Assets 5