EulerOS Virtualization 3.0.6.6 : python-mako (EulerOS-SA-2023-2416)

According to the versions of the python-mako package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Sqlalchemy mako before 1.2.2 is vulnerable to Regular expression Denial of Service when using the Lexer class to parse. This...

Amazon Linux 2 : python-mako (ALAS-2023-2164)

The version of python-mako installed on the remote host is prior to 0.8.1-2. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2023-2164 advisory. Sqlalchemy mako before 1.2.2 is vulnerable to Regular expression Denial of Service when using the Lexer class to parse. This al...

Medium: python-mako

Issue Overview: Sqlalchemy mako before 1.2.2 is vulnerable to Regular expression Denial of Service when using the Lexer class to parse. This also affects babelplugin and linguaplugin. CVE-2022-40023 Affected Packages: python-mako Note: This advisory is applicable to Amazon Linux 2 AL2 Core...

MAL-2023-1414 Malicious code in sqlalchemy-os (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0e9079084215abb63a9468cc5ba89b5275afec40b081f77e9518498eb56a0c30 The OpenSSF Package Analysis project identified 'sqlalchemy-os' @ 14.0.10 pypi as malicious. It is considered malicious because: - The package...

Malicious code in sqlalchemy-os (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0e9079084215abb63a9468cc5ba89b5275afec40b081f77e9518498eb56a0c30 The OpenSSF Package Analysis project identified 'sqlalchemy-os' @ 14.0.10 pypi as malicious. It is considered malicious because: - The package...

Malicious code in sqlalchemy-requests (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis be7d898e9281f3e8f393a19f3b1e4eece53fe128076fb65cc38c73116fc8de64 The OpenSSF Package Analysis project identified 'sqlalchemy-requests' @ 7.1.1 pypi as malicious. It is considered malicious because: - The packa...

MAL-2023-1415 Malicious code in sqlalchemy-requests (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis be7d898e9281f3e8f393a19f3b1e4eece53fe128076fb65cc38c73116fc8de64 The OpenSSF Package Analysis project identified 'sqlalchemy-requests' @ 7.1.1 pypi as malicious. It is considered malicious because: - The packa...

MAL-2023-1379 Malicious code in matplotlib-sqlalchemy (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 1e95f621034f0f8a7815196be16626cb63483120da948a396c70ae3d6e0f14b9 The OpenSSF Package Analysis project identified 'matplotlib-sqlalchemy' @ 16.18.4 pypi as malicious. It is considered malicious because: - The...

Malicious code in matplotlib-sqlalchemy (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 1e95f621034f0f8a7815196be16626cb63483120da948a396c70ae3d6e0f14b9 The OpenSSF Package Analysis project identified 'matplotlib-sqlalchemy' @ 16.18.4 pypi as malicious. It is considered malicious because: - The...

MAL-2023-1413 Malicious code in sqlalchemy-install (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 3ce12486a1a8196d6697337e961e7b9410b2fbd2b426fb7fe0005a6a08db2255 The OpenSSF Package Analysis project identified 'sqlalchemy-install' @ 10.9.4 pypi as malicious. It is considered malicious because: - The packa...

Malicious code in sqlalchemy-install (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 3ce12486a1a8196d6697337e961e7b9410b2fbd2b426fb7fe0005a6a08db2255 The OpenSSF Package Analysis project identified 'sqlalchemy-install' @ 10.9.4 pypi as malicious. It is considered malicious because: - The packa...

The vulnerability of the Sqlalchemy mako Python template library, related to an incorrect regular expression, allows attackers to cause service interruptions.

The vulnerability of the Sqlalchemy mako Python template library is related to insufficient input validation when processing regular expressions in the Lexer class. Exploiting this vulnerability allows a malicious actor to deliver specially crafted data to the application and execute a...

Huawei EulerOS: Security Advisory for python-mako (EulerOS-SA-2023-1745)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS Virtualization 3.0.2.0 : python-mako (EulerOS-SA-2023-1745)

According to the versions of the python-mako package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Sqlalchemy mako before 1.2.2 is vulnerable to Regular expression Denial of Service when using the Lexer class to parse. This...

ROS-20230428-02

A vulnerability in the Sqlalchemy mako Python template library is related to insufficient input validation when processing regular expressions in the Lexer class. Exploitation of the vulnerability could allow an attacker, acting remotely, pass specially crafted data to an application and perform ...

FreeBSD : py39-sqlalchemy12 -- multiple SQL Injection vulnerabilities (d2293e22-4390-42c2-a323-34cca2066000)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the d2293e22-4390-42c2-a323-34cca2066000 advisory. - SQLAlchemy through 1.2.17 and 1.3.x through 1.3.0b2 allows SQL Injection via the orderby...

FreeBSD : py39-sqlalchemy11 -- multiple SQL Injection vulnerabilities (8ccff771-ceca-43a0-85ad-3e595e73b425)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 8ccff771-ceca-43a0-85ad-3e595e73b425 advisory. - SQLAlchemy through 1.2.17 and 1.3.x through 1.3.0b2 allows SQL Injection via the orderby...

CBL Mariner 2.0 Security Update: python-mako (CVE-2022-40023)

The version of python-mako installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-40023 advisory. - Sqlalchemy mako before 1.2.2 is vulnerable to Regular expression Denial of Service when using the Lexer...

Huawei EulerOS: Security Advisory for python-mako (EulerOS-SA-2023-1514)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS 2.0 SP5 : python-mako (EulerOS-SA-2023-1514)

According to the versions of the python-mako package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Sqlalchemy mako before 1.2.2 is vulnerable to Regular expression Denial of Service when using the Lexer class to parse. This also affects...