TI-2026-65548 CVE-2026-102991 · GHSA-5639-2j2p-m4mx
Mako: Path traversal via drive-letter URI on Windows in TemplateLookup
Priority MEDIUM 62
Mako is a template library written in Python.
Vulnerabilities
7 records
TI-2026-32275 CVE-2026-44307 · GHSA-2h4p-vjrc-8xpq
Mako: Path traversal via backslash URI on Windows in TemplateLookup
Priority MEDIUM 45
Mako is a template library written in Python.
TI-2026-29824 CVE-2026-41205 · GHSA-v92g-xgxw-vvmm
Mako: Path traversal via double-slash URI prefix in TemplateLookup
Priority LOW 34
Mako is a template library written in Python.
TI-2022-18951 CVE-2022-40023 · GHSA-v973-fxgf-6xhp
Sqlalchemy mako before 1.2.2 is vulnerable to Regular expression Denial of Service when…
Priority LOW 37
Sqlalchemy mako before 1.2.2 is vulnerable to Regular expression Denial of Service when using the Lexer class to parse.
TI-2019-05082 CVE-2019-7164 · GHSA-887w-45rq-vxgf
SQLAlchemy through 1.2.17 and 1.3.x through 1.3.0b2 allows SQL Injection via the order_by parameter.
Priority MEDIUM 48
SQLAlchemy through 1.2.17 and 1.3.x through 1.3.0b2 allows SQL Injection via the order_by parameter.
TI-2019-05329 CVE-2019-7548 · GHSA-38fc-9xqv-7f7q
SQLAlchemy 1.2.17 has SQL Injection when the group_by parameter can be controlled.
Priority LOW 38
SQLAlchemy 1.2.17 has SQL Injection when the group_by parameter can be controlled.
TI-2012-00742 CVE-2012-0805 · GHSA-hfg2-wf6j-x53p
Multiple SQL injection vulnerabilities in SQLAlchemy before 0.7.0b4, as used in Keystone…
Priority LOW 38
Multiple SQL injection vulnerabilities in SQLAlchemy before 0.7.0b4, as used in Keystone, allow remote attackers to execute arbitrary SQL commands via the (1) limit or (2) offset keyword to the select function, or unspec…