CVE-2014-1402
pocoo jinja2: no CVSS score yet. EPSS 0.4% chance of exploitation in the next 30 days. Fixed in jinja2 2.7.2.
The default configuration for bccache.FileSystemBytecodeCache in Jinja2 before 2.7.2 does not properly create temporary files, which allows local users to gain privileges via a crafted .cache file with a name starting with __jinja2_ in /tmp.
- EPSS
- 0.4% chance of exploitation in the next 30 days; higher than 31% of CVEs (scores of 2026-10-31)
- CWE
- CWE-264
- Published
- Modified
- Record from
- the NVD, synced
Affected
- pocoo:jinja2
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-8r7q-cvjq-x353 | PyPI | jinja2 | <2.7.2 | 2.7.2 |
| PYSEC-2014-8 | PyPI | jinja2 | <2.7.2 | 2.7.2 |