TI-2026-65548 CVE-2026-102991 · GHSA-5639-2j2p-m4mx
Mako: Path traversal via drive-letter URI on Windows in TemplateLookup
Priority MEDIUM 62
Mako is a template library written in Python.
sqlalchemy
Records7All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high5CVSS 7.0–8.9
Exploited now
sqlalchemy records in CISA KEVNo sqlalchemy vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
7 records
TI-2019-05082 CVE-2019-7164 · GHSA-887w-45rq-vxgf
SQLAlchemy through 1.2.17 and 1.3.x through 1.3.0b2 allows SQL Injection via the order_by parameter.
Priority MEDIUM 48
SQLAlchemy through 1.2.17 and 1.3.x through 1.3.0b2 allows SQL Injection via the order_by parameter.
TI-2026-32275 CVE-2026-44307 · GHSA-2h4p-vjrc-8xpq
Mako: Path traversal via backslash URI on Windows in TemplateLookup
Priority MEDIUM 45
Mako is a template library written in Python.
TI-2019-05329 CVE-2019-7548 · GHSA-38fc-9xqv-7f7q
SQLAlchemy 1.2.17 has SQL Injection when the group_by parameter can be controlled.
Priority LOW 38
SQLAlchemy 1.2.17 has SQL Injection when the group_by parameter can be controlled.
TI-2012-00742 CVE-2012-0805 · GHSA-hfg2-wf6j-x53p
Multiple SQL injection vulnerabilities in SQLAlchemy before 0.7.0b4, as used in Keystone…
Priority LOW 38
Multiple SQL injection vulnerabilities in SQLAlchemy before 0.7.0b4, as used in Keystone, allow remote attackers to execute arbitrary SQL commands via the (1) limit or (2) offset keyword to the select function, or unspec…
TI-2022-18951 CVE-2022-40023 · GHSA-v973-fxgf-6xhp
Sqlalchemy mako before 1.2.2 is vulnerable to Regular expression Denial of Service when…
Priority LOW 37
Sqlalchemy mako before 1.2.2 is vulnerable to Regular expression Denial of Service when using the Lexer class to parse.
TI-2026-29824 CVE-2026-41205 · GHSA-v92g-xgxw-vvmm
Mako: Path traversal via double-slash URI prefix in TemplateLookup
Priority LOW 34
Mako is a template library written in Python.