USN-5625-1 mako vulnerability

It was discovered that Mako incorrectly handled certain regular expressions. An attacker could possibly use this issue to cause a denial of service...

USN-5625-1: Mako vulnerability

It was discovered that Mako incorrectly handled certain regular expressions. An attacker could possibly use this issue to cause a denial of service...

Ubuntu 16.04 ESM / 18.04 LTS / 20.04 LTS / 22.04 LTS : Mako vulnerability (USN-5625-1)

The remote Ubuntu 16.04 ESM / 18.04 LTS / 20.04 LTS / 22.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-5625-1 advisory. It was discovered that Mako incorrectly handled certain regular expressions. An attacker could possibly use this issue to caus...

Debian dla-3116 : python-mako - security update

The remote Debian 10 host has packages installed that are affected by a vulnerability as referenced in the dla-3116 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3116-1 [email protected] https://www.debian.org/lts/security/...

DLA-3116-1 mako - security update

Bulletin has no description...

GHSA-V973-FXGF-6XHP mako is vulnerable to Regular Expression Denial of Service

Sqlalchemy mako before 1.2.2 is vulnerable to Regular expression Denial of Service when using the Lexer class to parse. This also affects babelplugin and linguaplugin...

mako is vulnerable to Regular Expression Denial of Service

Sqlalchemy mako before 1.2.2 is vulnerable to Regular expression Denial of Service when using the Lexer class to parse. This also affects babelplugin and linguaplugin...

adoc (>=0.1.0, <=0.1.5), alembic-viz (0.1.0) +126 more potentially affected by CVE-2022-40023 via mako (>=1.0.1, <=1.2.1)

mako PYPI version =1.0.1, =0.1.0, =0.1.0.dev1, =1.0.4, =0.0.1, =0.1.2, =0.3.24, =0.1.0, =0.1.1, =2016.3.17, =1.3.1, =1.2.3, =1.4.0 - cmc-py-wrapper 0.1.0 - coil 1.2.1 and more Source cves: CVE-2022-40023 Source advisory: GHSA-V973-FXGF-6XHP...

Sqlalchemy mako before 1.2.2 is vulnerable to Regular expression Denial of Service when using the Lexer class to parse. This also affects babelplugin and linguaplugin.

...

Regular Expression Denial Of Service (ReDoS)

Mako is vulnerable to regular expression denial of service. The vulnerability exists due to the insecure regex pattern used for the match attribute in the matchtagstart function of lexer.py, allowing an attacker to crash the application by providing a large number of tag quotes within its quoted...

CVE-2022-40023

Sqlalchemy mako before 1.2.2 is vulnerable to Regular expression Denial of Service when using the Lexer class to parse. This also affects babelplugin and linguaplugin...

DEBIAN-CVE-2022-40023

Sqlalchemy mako before 1.2.2 is vulnerable to Regular expression Denial of Service when using the Lexer class to parse. This also affects babelplugin and linguaplugin...

AZL-10892 CVE-2022-40023 affecting package python-mako for versions less than 1.2.2-1

Sqlalchemy mako before 1.2.2 is vulnerable to Regular expression Denial of Service when using the Lexer class to parse. This also affects babelplugin and linguaplugin...

ALPINE-CVE-2022-40023

Sqlalchemy mako before 1.2.2 is vulnerable to Regular expression Denial of Service when using the Lexer class to parse. This also affects babelplugin and linguaplugin...

PYSEC-2022-260

Sqlalchemy mako before 1.2.2 is vulnerable to Regular expression Denial of Service when using the Lexer class to parse. This also affects babelplugin and linguaplugin...

UBUNTU-CVE-2022-40023

Sqlalchemy mako before 1.2.2 is vulnerable to Regular expression Denial of Service when using the Lexer class to parse. This also affects babelplugin and linguaplugin...

Design/Logic Flaw

Sqlalchemy mako before 1.2.2 is vulnerable to Regular expression Denial of Service when using the Lexer class to parse. This also affects babelplugin and linguaplugin...

PYSEC-2022-260

Sqlalchemy mako before 1.2.2 is vulnerable to Regular expression Denial of Service when using the Lexer class to parse. This also affects babelplugin and linguaplugin...

CVE-2022-40023

Sqlalchemy mako before 1.2.2 is vulnerable to Regular expression Denial of Service when using the Lexer class to parse. This also affects babelplugin and linguaplugin...

adoc (>=0.1.0, <=0.1.5), alembic-viz (0.1.0) +126 more potentially affected by CVE-2022-40023 via mako (>=1.0.1, <=1.2.1)

mako PYPI version =1.0.1, =0.1.0, =0.1.0.dev1, =1.0.4, =0.0.1, =0.1.2, =0.3.24, =0.1.0, =0.1.1, =2016.3.17, =1.3.1, =1.2.3, =1.4.0 - cmc-py-wrapper 0.1.0 - coil 1.2.1 and more Source cves: CVE-2022-40023 Source advisory: OSV:PYSEC-2022-260...