Jinjava (Hubspot) - vulnerabilities (CVEs)

4 CVEs, 0 in the last 30 days, 37 known versions, newest CVE from 2026-02-04. Vendor: Hubspot.

CVEs of Jinjava

• CVE-2026-25526 - CVSS 9.8 (critical), 2026-02-04: JinJava is a Java-based template engine based on django template syntax, adapted to render jinja templates. Prior to versions 2.7.6 and 2.8.3, JinJava is…
• CVE-2025-59340 - CVSS 10 (critical), 2025-09-17: jinjava is a Java-based template engine based on django template syntax, adapted to render jinja templates. Priori to 2.8.1, by using…
• CVE-2020-12668 - CVSS 6.5 (medium), 2021-02-19: Jinjava before 2.5.4 allow access to arbitrary classes by calling Java methods on objects passed into a Jinjava context. This could allow for abuse of the…
• CVE-2018-18893 - CVSS 5.3 (medium), 2019-01-03: Jinjava before 2.4.6 does not block the getClass method, related to com/hubspot/jinjava/el/ext/JinjavaBeanELResolver.java.