Lucene search
+L

226 matches found

Tenable Nessus
Tenable Nessus
added 2022/09/21 12:00 a.m.36 views

Ubuntu 16.04 ESM / 18.04 LTS / 20.04 LTS / 22.04 LTS : Mako vulnerability (USN-5625-1)

The remote Ubuntu 16.04 ESM / 18.04 LTS / 20.04 LTS / 22.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-5625-1 advisory. It was discovered that Mako incorrectly handled certain regular expressions. An attacker could possibly use this issue to caus...

7.5CVSS7.5AI score0.02156EPSS
SaveExploits1References2
OSV
OSV
added 2022/09/21 12:00 a.m.18 views

DLA-3116-1 mako - security update

Bulletin has no description...

7.5CVSS7.6AI score0.02156EPSS
SaveExploits1
Tenable Nessus
Tenable Nessus
added 2022/09/21 12:00 a.m.31 views

Debian dla-3116 : python-mako - security update

The remote Debian 10 host has packages installed that are affected by a vulnerability as referenced in the dla-3116 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3116-1 [email protected] https://www.debian.org/lts/security/...

7.5CVSS7.3AI score0.02156EPSS
SaveExploits1References4
Github Security Blog
Github Security Blog
added 2022/09/16 5:20 p.m.55 views

mako is vulnerable to Regular Expression Denial of Service

Sqlalchemy mako before 1.2.2 is vulnerable to Regular expression Denial of Service when using the Lexer class to parse. This also affects babelplugin and linguaplugin...

7.5CVSS7.2AI score0.02156EPSS
SaveExploits1References10Affected Software1
OSV
OSV
added 2022/09/16 5:20 p.m.24 views

GHSA-V973-FXGF-6XHP mako is vulnerable to Regular Expression Denial of Service

Sqlalchemy mako before 1.2.2 is vulnerable to Regular expression Denial of Service when using the Lexer class to parse. This also affects babelplugin and linguaplugin...

8.7CVSS7.1AI score0.02156EPSS
SaveExploits1References11
Microsoft CVE
Microsoft CVE
added 2022/09/10 7:00 a.m.10 views

Sqlalchemy mako before 1.2.2 is vulnerable to Regular expression Denial of Service when using the Lexer class to parse. This also affects babelplugin and linguaplugin.

...

7.5CVSS7.8AI score0.02156EPSS
SaveExploits1
Veracode
Veracode
added 2022/09/08 4:31 a.m.32 views

Regular Expression Denial Of Service (ReDoS)

Mako is vulnerable to regular expression denial of service. The vulnerability exists due to the insecure regex pattern used for the match attribute in the matchtagstart function of lexer.py, allowing an attacker to crash the application by providing a large number of tag quotes within its quoted...

7.5CVSS7.1AI score0.02156EPSS
SaveExploits1References6Affected Software4
OSV
OSV
added 2022/09/07 1:15 p.m.7 views

ALPINE-CVE-2022-40023

Sqlalchemy mako before 1.2.2 is vulnerable to Regular expression Denial of Service when using the Lexer class to parse. This also affects babelplugin and linguaplugin...

7.5CVSS7AI score0.02156EPSS
SaveExploits1References1
NVD
NVD
added 2022/09/07 1:15 p.m.26 views

CVE-2022-40023

Sqlalchemy mako before 1.2.2 is vulnerable to Regular expression Denial of Service when using the Lexer class to parse. This also affects babelplugin and linguaplugin...

7.5CVSS0.02156EPSS
SaveExploits1References7
OSV
OSV
added 2022/09/07 1:15 p.m.14 views

AZL-10892 CVE-2022-40023 affecting package python-mako for versions less than 1.2.2-1

Sqlalchemy mako before 1.2.2 is vulnerable to Regular expression Denial of Service when using the Lexer class to parse. This also affects babelplugin and linguaplugin...

7.5CVSS7.2AI score0.02156EPSS
SaveExploits1References1
OSV
OSV
added 2022/09/07 1:15 p.m.5 views

DEBIAN-CVE-2022-40023

Sqlalchemy mako before 1.2.2 is vulnerable to Regular expression Denial of Service when using the Lexer class to parse. This also affects babelplugin and linguaplugin...

7.5CVSS7.6AI score0.02156EPSS
SaveExploits1References1
OSV
OSV
added 2022/09/07 1:15 p.m.12 views

PYSEC-2022-260

Sqlalchemy mako before 1.2.2 is vulnerable to Regular expression Denial of Service when using the Lexer class to parse. This also affects babelplugin and linguaplugin...

7.5CVSS7.1AI score0.02156EPSS
SaveExploits1References5
Prion
Prion
added 2022/09/07 1:15 p.m.34 views

Design/Logic Flaw

Sqlalchemy mako before 1.2.2 is vulnerable to Regular expression Denial of Service when using the Lexer class to parse. This also affects babelplugin and linguaplugin...

5CVSS7.3AI score0.02156EPSS
SaveExploits1References6Affected Software2
UbuntuCve
UbuntuCve
added 2022/09/07 1:15 p.m.36 views

CVE-2022-40023

Sqlalchemy mako before 1.2.2 is vulnerable to Regular expression Denial of Service when using the Lexer class to parse. This also affects babelplugin and linguaplugin...

7.5CVSS7.1AI score0.02156EPSS
SaveExploits1References8
PyPA
PyPA
added 2022/09/07 1:15 p.m.11 views

PYSEC-2022-260

Sqlalchemy mako before 1.2.2 is vulnerable to Regular expression Denial of Service when using the Lexer class to parse. This also affects babelplugin and linguaplugin...

7.5CVSS7AI score0.02156EPSS
SaveExploits1References5Affected Software1
OSV
OSV
added 2022/09/07 1:15 p.m.9 views

UBUNTU-CVE-2022-40023

Sqlalchemy mako before 1.2.2 is vulnerable to Regular expression Denial of Service when using the Lexer class to parse. This also affects babelplugin and linguaplugin...

7.5CVSS7.1AI score0.02156EPSS
SaveExploits1References9
Cvelist
Cvelist
added 2022/09/07 12:00 a.m.42 views

CVE-2022-40023

Sqlalchemy mako before 1.2.2 is vulnerable to Regular expression Denial of Service when using the Lexer class to parse. This also affects babelplugin and linguaplugin...

7.7AI score0.02156EPSS
SaveExploits1References6
OSV
OSV
added 2022/09/07 12:00 a.m.46 views

CVE-2022-40023

Sqlalchemy mako before 1.2.2 is vulnerable to Regular expression Denial of Service when using the Lexer class to parse. This also affects babelplugin and linguaplugin...

5.7AI score
SaveExploits0References9
CNNVD
CNNVD
added 2022/09/07 12:00 a.m.9 views

SQLAlchemy 安全漏洞

SQLAlchemy is a Python based open source database ORM software. The product mainly provides SQL toolkit and object-relational mapping tools. A security vulnerability exists in SQLAlchemy mako versions prior to 1.2.2, which stems from vulnerability to regular expression denial of service attacks...

7.5CVSS7.6AI score0.02156EPSS
SaveExploits1References17
Debian CVE
Debian CVE
added 2022/09/07 12:00 a.m.48 views

CVE-2022-40023

Sqlalchemy mako before 1.2.2 is vulnerable to Regular expression Denial of Service when using the Lexer class to parse. This also affects babelplugin and linguaplugin...

7.5CVSS7.6AI score0.02156EPSS
SaveExploits1
Rows per page
Query Builder