PYSEC-2026-1929

See a problem?

Import Source

https://github.com/pypa/advisory-database/blob/main/vulns/skyvern/PYSEC-2026-1929.yaml

JSON Data

https://api.osv.dev/v1/vulns/PYSEC-2026-1929

Aliases

Published

2026-07-07T16:02:53.926530Z

Modified

2026-07-07T17:47:54.202779732Z

Severity

8.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N CVSS Calculator

Summary

Skyvern has a Jinja runtime leak

Details

Skyvern through 0.2.0 has a Jinja runtime leak in sdk/workflow/models/block.py.

References

Affected packages

PyPI / skyvern

Package

Name: skyvern; View open source insights on deps.dev
Purl: pkg:pypi/skyvern

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Last affected

0.2.0

Affected versions

0.*

0.1.53

0.1.55

0.1.56

0.1.62

0.1.63

0.1.64

0.1.66

0.1.67

0.1.68

0.1.69

0.1.70

0.1.71

0.1.72

0.1.73

0.1.74

0.1.75

0.1.76

0.1.77

0.1.78

0.1.79

0.1.81

0.1.82

0.1.83

0.1.84

0.1.85

0.1.86

0.1.88

0.1.89

0.2.0

Database specific

source

"https://github.com/pypa/advisory-database/blob/main/vulns/skyvern/PYSEC-2026-1929.yaml"