~ / search / GHSA-v973-fxgf-6xhp

GHSA-v973-fxgf-6xhp

mako is vulnerable to Regular Expression Denial of Service

Source: GitHub Advisory Database (reviewed) High CVE-2022-40023

Packages

EcosystemPackageAffectedFixed in
PyPI mako < 1.2.2 1.2.2

Details

As written in the advisory (Markdown source, shown as plain text).

Sqlalchemy mako before 1.2.2 is vulnerable to Regular expression Denial of Service when using the Lexer class to parse. This also affects babelplugin and linguaplugin.

References

External links from the advisory. They lead to third-party sites.