skyvernGHSA-h92g-3xc3-ww2r

Skyvern has a Jinja runtime leak

High8.5CVE-2025-49619 · Published Jun 7, 2025 · updated Jul 7, 2026

GitHub advisory

Affected versions

Package	Affected	Fixed in
skyvern PyPI	<= 0.2.0	No fix yet

Details and references

Skyvern through 0.2.0 has a Jinja runtime leak in sdk/workflow/models/block.py.

CVSS 3.1: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N
Severity from: GitHub (reviewed advisory)
Weakness: CWE-1336
Also known as: CVE-2025-49619, PYSEC-2026-1929

Critical advisories by email

Wednesdays: the week’s critical and high advisories in the AI and data stack, with the fixed versions. Only in weeks that have some.