High DLA-3116-1 1 CVE

mako - security update

Published Sep 21, 2022 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

Release	Package	Fixed in
Debian · 10	mako	1.0.7+ds1-1+deb10u1

Vulnerabilities 1

High 7.5

CVE-2022-40023

mako is vulnerable to Regular Expression Denial of Service

Sqlalchemy mako before 1.2.2 is vulnerable to Regular expression Denial of Service when using the Lexer class to parse. This also affects babelplugin and linguaplugin.

mako mako python-mako mako Debian Ubuntu Azure Linux Alpine PyPI

Sep 7, 2022