~ / search / GHSA-h92g-3xc3-ww2r

GHSA-h92g-3xc3-ww2r

Skyvern has a Jinja runtime leak

Source: GitHub Advisory Database (reviewed) High CVE-2025-49619

Packages

EcosystemPackageAffectedFixed in
PyPI skyvern <= 0.2.0 no fix listed

Details

As written in the advisory (Markdown source, shown as plain text).

Skyvern through 0.2.0 has a Jinja runtime leak in sdk/workflow/models/block.py.

References

External links from the advisory. They lead to third-party sites.