Medium ELSA-2023-2258 1 CVE

Moderate: python-mako security update (Oracle Linux 9)

Published May 15, 2023 · Updated May 15, 2023

Ecosystem: Oracle Linux

Summary

[1.1.4-6]
- Fix CVE-2022-40023 (#2133606)

Fixed packages 1

Release	Package	Fixed in
Oracle Linux · 9	python3-mako	0:1.1.4-6.el9

Vulnerabilities 1

High 7.5

CVE-2022-40023

mako is vulnerable to Regular Expression Denial of Service

Sqlalchemy mako before 1.2.2 is vulnerable to Regular expression Denial of Service when using the Lexer class to parse. This also affects babelplugin and linguaplugin.

mako mako python-mako mako Debian Ubuntu Azure Linux Alpine PyPI

Sep 7, 2022