Red Hat Security Advisory

RHSA-2023:2258

python-mako security update

Released 2023-05-09 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 9) python-mako-1.1.4-6.el9, python3-mako-1.1.4-6.el9

TI-2022-18951 CVE-2022-40023 · GHSA-v973-fxgf-6xhp

LOW 37

Sqlalchemy mako before 1.2.2 is vulnerable to Regular expression Denial of Service when using the Lexer class to parse.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0232 Published 2022-09-07 Partial fix · 1.2.2 CWE-1333