High DLA-4393-1 1 CVE

mako - security update

Published Dec 3, 2025 · Updated Dec 3, 2025

Ecosystem: Debian

Fixed packages 1

Release	Package	Fixed in
Debian · 11	mako	1.1.3+ds1-2+deb11u1

Vulnerabilities 1

High 7.5

CVE-2022-40023

mako is vulnerable to Regular Expression Denial of Service

Sqlalchemy mako before 1.2.2 is vulnerable to Regular expression Denial of Service when using the Lexer class to parse. This also affects babelplugin and linguaplugin.

mako mako python-mako mako Debian Ubuntu Azure Linux Alpine PyPI

Sep 7, 2022