MA
Product
mako
by sqlalchemy · last CVE Sep 30, 2026
4
CVEs
0
On KEV
8.7
Max CVSS
1
New 30D
Severity mix
Critical 0High 3Medium 1Low 0
Watch

Add mako to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-44307
8.7
1%
May 12
Mako: Path traversal via backslash URI on Windows in TemplateLookup
Affected: < 1.3.12
CVE-2026-41205
7.5
0%
Apr 23
Mako: Path traversal via double-slash URI prefix in TemplateLookup
Affected: < 1.3.11
CVE-2022-40023
7.5
2%
Sep 7
Sqlalchemy mako before 1.2.2 is vulnerable to Regular expression Denial of Service when using the Lexer class to parse
Affected: before 1.2.2
Showing 3