CVE-2026-102991

The Mako Python template library is vulnerable to a path traversal flaw on Windows in versions prior to 1.4.2 . The issue stems from a discrepancy where TemplateLookup.get_template() uses posixpath to resolve URIs, while Template.__init__() uses os.path (which utilizes ntpath) for validation. Att...

CVE-2026-102991

Mako is a template library written in Python. Prior to 1.4.2, on Windows, TemplateLookup.gettemplate in mako/lookup.py resolves template URIs with posixpath, while Template.init in mako/template.py validates them with os.path, which uses ntpath. A URI beginning with a drive designator causes ntpa...

CVE-2026-102991: Improper Limitation of a Pathname to a Restricted Directory

Mako is a template library written in Python. Prior to 1.4.2, on Windows, TemplateLookup.gettemplate in mako/lookup.py resolves template URIs with posixpath, while Template.init in mako/template.py validates them with os.path, which uses ntpath. A URI beginning with a drive designator causes ntpa...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: python-mako (UTSA-2023-002842)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-002842 advisory. Sqlalchemy mako before 1.2.2 is vulnerable to Regular expression Denial of Service when using the Lexer class to parse. This also affects babelplugin and linguaplugi...

PT-2026-103522

Name of the Vulnerable Software and Affected Versions Mako versions prior to 1.4.2 Description On Windows, the TemplateLookup.get template function in mako/lookup.py resolves template URIs using posixpath, whereas Template. init in mako/template.py validates them using os.path which utilizes...

ROOT-APP-PYPI-CVE-2026-44307 CVE-2026-44307 in mako - Patched by Root

Root has patched CVE-2026-44307 in the mako package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2026-41205 CVE-2026-41205 in mako - Patched by Root

Root has patched CVE-2026-41205 in the mako package for Root:PyPI. Multiple fixed versions available...

OPENSUSE-SU-2026:11567-1 python313-Mako-1.4.1-1.1 on GA media

These are all security issues fixed in the python313-Mako-1.4.1-1.1 package on the GA media of openSUSE Tumbleweed...

PT-2026-80615

These are all security issues fixed in the python313-Mako-1.4.1-1.1 package on the GA media of openSUSE Tumbleweed...

Important Photon OS Security Update - PHSA-2026-5.0-92-0960

Updates of 'python3-mako', 'go' packages of Photon OS have been released...

Security Bulletin:Mako Template Lookup Path Traversal Vulnerability Fixed in 1.3.11

Summary Mako is a template library written in Python. Prior to 1.3.11, TemplateLookup.gettemplate is vulnerable to path traversal when a URI starts with // e.g., //../../../secret.txt. The root cause is an inconsistency between two slash-stripping implementations. Any file readable by the process...

Security Bulletin:Mako Template Library Vulnerability: Backslash Traversal on Windows Prior to Version 1.3.12

Summary Mako is a template library written in Python. Prior to 1.3.12, on Windows, a URI using backslash traversal e.g. \..\..\ secret.txt bypasses the directory traversal check in Template.init and the posixpath-based normalization in TemplateLookup.gettemplate, allowing reads of files outside...

The vulnerability of the Sqlalchemy mako Python template library relates to incorrect path name restrictions for restricted access directories, allowing attackers to gain unauthorized access to protected information.

The vulnerability of the Sqlalchemy mako Python template library relates to an incorrect restriction on the path name of the restricted directory. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

The vulnerability of the Sqlalchemy mako Python template library relates to incorrect path name restrictions for restricted access directories, allowing attackers to gain unauthorized access to protected information.

The vulnerability of the Sqlalchemy mako Python template library relates to an incorrect restriction on the path name of the restricted directory. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

PYSEC-2026-2617 Mako vulnerable to path traversal via backslash URI on Windows in TemplateLookup

Summary On Windows, a URI using backslash traversal e.g. ....\ secret.txt bypasses the directory traversal check in Template.init and the posixpath-based normalization in TemplateLookup.gettemplate, allowing reads of files outside the configured template directory. Details The root cause is a...

Mako vulnerable to path traversal via backslash URI on Windows in TemplateLookup

SummaryOn Windows, a URI using backslash traversal e.g. \..\..\ secret.txt bypasses the directory traversal check in Template.init and the posixpath-based normalization in TemplateLookup.gettemplate, allowing reads of files outside the configured template directory. DetailsThe root cause is a...

ROS-20260713-73-0041

The vulnerability in python-mako is related to incorrect restrictions on the path name of the restricted directory. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

ROS-20260713-73-0042

The vulnerability in python-mako is related to incorrect restrictions on the path name of the restricted directory. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

PT-2026-59270

Summary On Windows, a URI using backslash traversal e.g. .... secret.txt bypasses the directory traversal check in Template. init and the posixpath-based normalization in TemplateLookup.get template, allowing reads of files outside the configured template directory. Details The root cause is a...

Amazon Linux 2023 : python3-mako (ALAS2023-2026-1846)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-1846 advisory. Mako is a template library written in Python. Prior to 1.3.11, TemplateLookup.gettemplate is vulnerable to path traversal when a URI starts with // e.g., //../../../secret.txt. The root cause is an...