AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

skyvernGHSA-h92g-3xc3-ww2r

Skyvern has a Jinja runtime leak

skyvern

CVE-2025-49619 · Published Jun 7, 2025 · updated Jul 7, 2026

High8.5
No fix yet
GitHub advisory

Skyvern through 0.2.0 has a Jinja runtime leak in sdk/workflow/models/block.py.

Affected versions

PackageAffectedFixed in
skyvern
PyPI
<= 0.2.0No fix yet
Details and references
CVSS 3.1
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N
Severity from
GitHub (reviewed advisory)
Weakness
CWE-1336
Also known as
CVE-2025-49619, PYSEC-2026-1929