Astra Linux – vulnerability in mako

Mako is a template library written in Python. Prior to version 1.3.11, TemplateLookup.gettemplate was vulnerable to path traversal when a URI began with // e.g., //../../../secret.txt. The root cause was an inconsistency between two implementations of slashing paths. Any file that the process can...