Improper Neutralization in Jinja2 Template Handler of Wix-Incubator Jam

CVE-2025-3841

Summary

A vulnerability exists in the Wix-Incubator Jam that impacts the Jinja2 Template Handler, specifically in the jam.py file. This issue arises from improper neutralization of the config['template'] argument, allowing special elements utilized in the template engine to be exploited. Attackers can potentially execute local host attacks, undermining the security of the application. Given the continuous delivery model of this product, detailed version updates and specifics about patched releases may not be readily available. It is crucial for users to remain vigilant and apply necessary security measures to mitigate risks associated with this vulnerability.

References