MA
Product
mako
4
CVEs
0
On KEV
8.7
Max CVSS
1
New 30D
Severity mix
Critical 0High 3Medium 1Low 0
Watch
Add mako to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-44307 | 8.7 | May 12 | Mako: Path traversal via backslash URI on Windows in TemplateLookup Affected: < 1.3.12 |
| CVE-2026-41205 | 7.5 | Apr 23 | Mako: Path traversal via double-slash URI prefix in TemplateLookup Affected: < 1.3.11 |
| CVE-2022-40023 | 7.5 | Sep 7 | Sqlalchemy mako before 1.2.2 is vulnerable to Regular expression Denial of Service when using the Lexer class to parse Affected: before 1.2.2 |
| CVE-2026-102991 | 6.5 | Sep 30 | Mako: Path traversal via drive-letter URI on Windows in TemplateLookup Affected: < 1.4.2 |
Showing 4