Skip to content
OpenAdvisories

Package · Debian

mako

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.7
    CVE-2026-41205

    Mako: Path traversal via double-slash URI prefix in TemplateLookup

    Mako is a template library written in Python. Prior to 1.3.11, TemplateLookup.get_template() is vulnerable to path traversal when a URI starts with // (e.g., //../../../secret.txt). The root cause is an inconsistency between two slash-stripping implementation…

    sqlalchemy mako mako mako Debian Ubuntu PyPI
  • High 7.5
    CVE-2022-40023

    mako is vulnerable to Regular Expression Denial of Service

    Sqlalchemy mako before 1.2.2 is vulnerable to Regular expression Denial of Service when using the Lexer class to parse. This also affects babelplugin and linguaplugin.

    mako mako mako py3-mako Debian Ubuntu Alpine PyPI