diff --git a/.changeset/light-rabbits-matter.md b/.changeset/light-rabbits-matter.md
new file mode 100644
index 0000000000..a528e4d1c5
--- /dev/null
+++ b/.changeset/light-rabbits-matter.md
@@ -0,0 +1,5 @@
+---
+'@backstage/plugin-scaffolder-backend': patch
+---
+
+Switched to executing scaffolder templating in a secure context for any template based on nunjucks, as it is not secure by default (https://mozilla.github.io/nunjucks/api.html#user-defined-templates-warning).