Lucene search
K

270 matches found

Github Security Blog
Github Security Blog
added 2022/09/16 5:20 p.m.43 views

mako is vulnerable to Regular Expression Denial of Service

Sqlalchemy mako before 1.2.2 is vulnerable to Regular expression Denial of Service when using the Lexer class to parse. This also affects babelplugin and linguaplugin...

7.5CVSS7.2AI score0.01006EPSS
Exploits1References10Affected Software1
Microsoft CVE
Microsoft CVE
added 2022/09/10 7:0 a.m.1 views

Sqlalchemy mako before 1.2.2 is vulnerable to Regular expression Denial of Service when using the Lexer class to parse. This also affects babelplugin and linguaplugin.

...

7.5CVSS7.8AI score0.01006EPSS
Exploits1
OSV
OSV
added 2022/09/07 1:15 p.m.1 views

DEBIAN-CVE-2022-40023

Sqlalchemy mako before 1.2.2 is vulnerable to Regular expression Denial of Service when using the Lexer class to parse. This also affects babelplugin and linguaplugin...

7.5CVSS7.6AI score0.01006EPSS
Exploits1References1
NVD
NVD
added 2022/09/07 1:15 p.m.12 views

CVE-2022-40023

Sqlalchemy mako before 1.2.2 is vulnerable to Regular expression Denial of Service when using the Lexer class to parse. This also affects babelplugin and linguaplugin...

7.5CVSS0.01006EPSS
Exploits1References7
OSV
OSV
added 2022/09/07 1:15 p.m.1 views

ALPINE-CVE-2022-40023

Sqlalchemy mako before 1.2.2 is vulnerable to Regular expression Denial of Service when using the Lexer class to parse. This also affects babelplugin and linguaplugin...

7.5CVSS7AI score0.01006EPSS
Exploits1References1
OSV
OSV
added 2022/09/07 1:15 p.m.31 views

CVE-2022-40023

Sqlalchemy mako before 1.2.2 is vulnerable to Regular expression Denial of Service when using the Lexer class to parse. This also affects babelplugin and linguaplugin...

7.5CVSS5.7AI score0.01006EPSS
Exploits1References7
Prion
Prion
added 2022/09/07 1:15 p.m.18 views

Design/Logic Flaw

Sqlalchemy mako before 1.2.2 is vulnerable to Regular expression Denial of Service when using the Lexer class to parse. This also affects babelplugin and linguaplugin...

5CVSS7.3AI score0.01006EPSS
Exploits1References6Affected Software2
PyPA
PyPA
added 2022/09/07 1:15 p.m.4 views

PYSEC-2022-260

Sqlalchemy mako before 1.2.2 is vulnerable to Regular expression Denial of Service when using the Lexer class to parse. This also affects babelplugin and linguaplugin...

7.5CVSS7AI score0.01006EPSS
Exploits1References5Affected Software1
OSV
OSV
added 2022/09/07 1:15 p.m.0 views

PYSEC-2022-260

Sqlalchemy mako before 1.2.2 is vulnerable to Regular expression Denial of Service when using the Lexer class to parse. This also affects babelplugin and linguaplugin...

7.5CVSS7.1AI score0.01006EPSS
Exploits1References5
UbuntuCve
UbuntuCve
added 2022/09/07 1:15 p.m.24 views

CVE-2022-40023

Sqlalchemy mako before 1.2.2 is vulnerable to Regular expression Denial of Service when using the Lexer class to parse. This also affects babelplugin and linguaplugin...

7.5CVSS7.1AI score0.01006EPSS
Exploits1References8
OSV
OSV
added 2022/09/07 1:15 p.m.0 views

UBUNTU-CVE-2022-40023

Sqlalchemy mako before 1.2.2 is vulnerable to Regular expression Denial of Service when using the Lexer class to parse. This also affects babelplugin and linguaplugin...

7.5CVSS7.1AI score0.01006EPSS
Exploits1References9
Debian CVE
Debian CVE
added 2022/09/07 12:0 a.m.28 views

CVE-2022-40023

Sqlalchemy mako before 1.2.2 is vulnerable to Regular expression Denial of Service when using the Lexer class to parse. This also affects babelplugin and linguaplugin...

7.5CVSS7.6AI score0.01006EPSS
Exploits1
CNNVD
CNNVD
added 2022/09/07 12:0 a.m.1 views

SQLAlchemy 安全漏洞

SQLAlchemy is a Python based open source database ORM software. The product mainly provides SQL toolkit and object-relational mapping tools. A security vulnerability exists in SQLAlchemy mako versions prior to 1.2.2, which stems from vulnerability to regular expression denial of service attacks...

7.5CVSS7.6AI score0.01006EPSS
Exploits1References17
Cvelist
Cvelist
added 2022/09/07 12:0 a.m.23 views

CVE-2022-40023

Sqlalchemy mako before 1.2.2 is vulnerable to Regular expression Denial of Service when using the Lexer class to parse. This also affects babelplugin and linguaplugin...

7.7AI score0.01006EPSS
Exploits1References6
CVE
CVE
added 2022/09/07 12:0 a.m.277 views

CVE-2022-40023

CVE-2022-40023 affects the Python package mako (and related plugins) with a Regular expression Denial of Service in the Lexer parser when using mako before version 1.2.2. Connected advisories consistently state the issue is fixed in newer mako/python-mako packages across distributions (e.g., Debi...

7.5CVSS7.2AI score0.01006EPSS
Exploits1References7Affected Software1
AlpineLinux
AlpineLinux
added 2022/09/07 12:0 a.m.38 views

CVE-2022-40023

Sqlalchemy mako before 1.2.2 is vulnerable to Regular expression Denial of Service when using the Lexer class to parse. This also affects babelplugin and linguaplugin...

7.5CVSS7.5AI score0.01006EPSS
Exploits1
Github Security Blog
Github Security Blog
added 2022/05/14 3:49 a.m.27 views

SQLAlchemy vulnerable to SQL injection

Multiple SQL injection vulnerabilities in SQLAlchemy before 0.7.0b4, as used in Keystone, allow remote attackers to execute arbitrary SQL commands via the 1 limit or 2 offset keyword to the select function, or unspecified vectors to the 3 select.limit or 4 select.offset function...

7.5CVSS8.7AI score0.01649EPSS
Exploits2References13Affected Software1
OSV
OSV
added 2022/05/14 3:49 a.m.2 views

GHSA-HFG2-WF6J-X53P SQLAlchemy vulnerable to SQL injection

Multiple SQL injection vulnerabilities in SQLAlchemy before 0.7.0b4, as used in Keystone, allow remote attackers to execute arbitrary SQL commands via the 1 limit or 2 offset keyword to the select function, or unspecified vectors to the 3 select.limit or 4 select.offset function...

9.8CVSS8.2AI score0.01649EPSS
Exploits2References13
OpenVAS
OpenVAS
added 2022/01/28 12:0 a.m.16 views

Mageia: Security Advisory (MGASA-2019-0350)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS8.8AI score0.0189EPSS
Exploits3References4
OpenVAS
OpenVAS
added 2021/11/07 12:0 a.m.23 views

Debian: Security Advisory (DLA-2811-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS8.8AI score0.0189EPSS
Exploits3References4
Rows per page
Query Builder