CVE Tools
Track your stack

Pocoo

2 CVEs tracked since 2014. Since May 2014, none of them reached CISA KEV.

Pocoo CVEs per month

May 2014 to May 2014. Point at a month, or focus the strip and use the arrow keys.
Pocoo CVEs per month, with the share now in CISA KEV
MonthCVEsIn CISA KEV
2014-0520

Products

The products that kept showing up in Pocoo's monthly top three, with their CVEs summed over those months.

  1. Jinja221 month

Latest CVEs

The 5 most recently published vulnerabilities affecting Pocoo.

  1. CVE-2024-22195Jinja vulnerable to Cross-Site Scripting (XSS)5.4
  2. CVE-2021-42771Babel.Locale in Babel before 2.9.1 allows attackers to load arbitrary locale .dat files (containing serialized Python objects) via directory traversal, leading to code execution.7.8
  3. CVE-2019-8341An issue was discovered in Jinja2 2.10. The from_string function is prone to Server Side Template Injection (SSTI) where it takes the "source" parameter as a template object, renders it, and then r...9.8
  4. CVE-2014-1402The default configuration for bccache.FileSystemBytecodeCache in Jinja2 before 2.7.2 does not properly create temporary files, which allows local users to gain privileges via a crafted .cache file ...4.4
  5. CVE-2014-0012FileSystemBytecodeCache in Jinja2 2.7.2 does not properly create temporary directories, which allows local users to gain privileges by pre-creating a temporary directory with a user's uid. NOTE: t...4.4

The record

Peak rank
#78 in May 2014
Busiest month shown
May 2014, 2 CVEs
Months with a KEV entry
0 since May 2014
Monthly snapshots
1 since 2014
Pocoo's full record, month by month

We use analytics cookies to see which pages and articles actually help people. Decline and none of them run — the site works the same. What we store