High USN-5625-1 1 CVE

mako vulnerability

Published Sep 21, 2022 · Updated Jun 25, 2026

Ecosystem: Ubuntu

Summary

It was discovered that Mako incorrectly handled certain regular expressions.
An attacker could possibly use this issue to cause a denial of service.

Fixed packages 4

Release	Package	Fixed in
Ubuntu · 18.04 LTS 18.04:LTS	mako	1.0.7+ds1-1ubuntu0.2
Ubuntu · 20.04 LTS 20.04:LTS	mako	1.1.0+ds1-1ubuntu2.1
Ubuntu · 22.04 LTS 22.04:LTS	mako	1.1.3+ds1-2ubuntu0.1
Ubuntu · Pro 16.04 LTS Pro:16.04:LTS	mako	1.0.3+ds1-1ubuntu1+esm1

Vulnerabilities 1

High 7.5

CVE-2022-40023

mako is vulnerable to Regular Expression Denial of Service

Sqlalchemy mako before 1.2.2 is vulnerable to Regular expression Denial of Service when using the Lexer class to parse. This also affects babelplugin and linguaplugin.

mako mako python-mako mako Debian Ubuntu Azure Linux Alpine PyPI

Sep 7, 2022

References

report
https://ubuntu.com/security/CVE-2022-40023