AZL-10892 CVE-2022-40023 affecting package python-mako for versions less than 1.2.2-1

🗓️ 07 Sep 2022 13:15:09Reported by GoogleType

osv🔗 osv.dev👁 1 Views

AZL-10892 CVE-2022-40023 affects python-mako below 1.2.2-1; Lexer parsing DoS affects babelplugin and linguaplugin.

Reporter	Title	Published	Views	Family All 113
IBM Security Bulletins	Security Bulletin: IBM Security QRadar Offenses Forwarder App for IBM QRadar SIEM is vulnerable to using components with known vulnerabilities (CVE-2023-26159, CVE-2022-40023, CVE-2022-25883)	13 Sep 202418:52	–	ibm
IBM Security Bulletins	Security Bulletin: Mutiple vulnerabilties affecting Watson Machine Learning Accelerator on Cloud Pak for Data	12 Dec 202317:39	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Spectrum Discover is vulnerable to multiple vulnerabilities	20 Jun 202304:41	–	ibm
Tenable Nessus	Amazon Linux 2023 : python3-mako (ALAS2023-2023-288)	14 Aug 202300:00	–	nessus
Tenable Nessus	Amazon Linux 2 : python-mako (ALAS-2023-2164)	26 Jul 202300:00	–	nessus
Tenable Nessus	Alibaba Cloud Linux 3 : 0057: python-mako (ALINUX3-SA-2023:0057)	14 May 202500:00	–	nessus
Tenable Nessus	AlmaLinux 9 : python-mako (ALSA-2023:2258)	14 May 202300:00	–	nessus
Tenable Nessus	AlmaLinux 8 : python-mako (ALSA-2023:2893)	21 May 202300:00	–	nessus
Tenable Nessus	CentOS 8 : python-mako (CESA-2023:2893)	16 May 202300:00	–	nessus
Tenable Nessus	CentOS 9 : python-mako-1.1.4-6.el9	29 Feb 202400:00	–	nessus

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2022-40023

21 Apr 2026 04:21Current

7.2High risk

Vulners AI Score7.2

CVSS 3.17.5

EPSS0.01006