There are two high-severity vulnerabilities affecting Jinja2, which appears to be bundled at build time under the following path in the repository:
📁 robotframework-ls/src/robotframework_ls/vendored
⚠️ Affected CVEs:
CVE-2024-56201
CVE-2024-56326
These vulnerabilities may expose users to code execution risks or template injection attacks, depending on how Jinja2 is used internally.
✅ Recommended Action:
To address these issues, upgrade Jinja2 to version 3.1.5 or later.