Intel

AIKIDO-2025-10011

minijinja is vulnerable to Uncaught Exception

Uncaught Exception Pre-CVE
Found by Aikido Intel before public disclosure or CVE publication.

10

Low Risk

This Affects:

RUSTminijinja
2.0.0-alpha.0 - 2.5.0
Fixed in 2.6.0

TL;DR

Affected versions of this package may execute unsafe code when handling Kwargs type objects, potentially allowing malicious inputs to trigger unintended behavior.

Who does this affect?

You are affected if you are using a version that falls within the vulnerable range.

Background info

minijinja is vulnerable to Uncaught Exception in versions 2.0.0-alpha.0 - 2.5.0.

How to fix this

Upgrade the minijinja library to the patch version.