The fix for CVE-2025-27516 announced in DLA-4126 does not supporting Python 2. Now, the support of Python 2 was re-instated. For Debian 11 bullseye, this problem has been fixed in version

Source: Debian 11 bullseye DLA-4126-2 critical: jinja2 regression fix