Skip to content
OpenAdvisories

Vendor

sqlalchemy

3 known vulnerabilities.

Products

mako 3
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.5
    CVE-2026-102991

    Mako: Path traversal via drive-letter URI on Windows in TemplateLookup

    Mako is a template library written in Python. Prior to 1.4.2, on Windows, TemplateLookup.get_template() in mako/lookup.py resolves template URIs with posixpath, while Template.__init__() in mako/template.py validates them with os.path, which uses ntpath. A UR…

    sqlalchemy mako mako mako Ubuntu PyPI