74 matches found
ROS-20260713-73-0042
The vulnerability in python-mako is related to incorrect restrictions on the path name of the restricted directory. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...
Medium: python-mako
Issue Overview: Mako is a template library written in Python. Prior to 1.3.11, TemplateLookup.gettemplate is vulnerable to path traversal when a URI starts with // e.g., //../../../secret.txt. The root cause is an inconsistency between two slash-stripping implementations. Any file readable by the...
SUSE SLED15 / SLES15 Security Update : python-Mako (SUSE-SU-2026:1819-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2026:1819-1 advisory. This update for python-Mako fixes the following issue: - CVE-2026-41205: Prior to 1.3.11, TemplateLookup.gettemplate is...
SUSE SLES15 Security Update : python-Mako (SUSE-SU-2026:1820-1)
The remote SUSE Linux SLES15 / SLESSAP15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2026:1820-1 advisory. This update for python-Mako fixes the following issue: - CVE-2026-41205: Prior to 1.3.11, TemplateLookup.gettemplate is vulnerable to path...
SUSE-SU-2026:1820-1 Security update for python-Mako
This update for python-Mako fixes the following issue: - CVE-2026-41205: Prior to 1.3.11, TemplateLookup.gettemplate is vulnerable to path traversal bsc1262716...
SUSE-SU-2026:1819-1 Security update for python-Mako
This update for python-Mako fixes the following issue: - CVE-2026-41205: Prior to 1.3.11, TemplateLookup.gettemplate is vulnerable to path traversal bsc1262716...
CVE-2026-41205 affecting package python-mako for versions less than 1.2.4-3
CVE-2026-41205 affecting package python-mako for versions less than 1.2.4-3. A patched version of the package is available...
SUSE SLES16 Security Update : python-Mako (SUSE-SU-2026:21426-1)
The remote SUSE Linux SLES16 / SLESSAP16 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2026:21426-1 advisory. This update for python-Mako fixes the following issue: - CVE-2026-41205: Prior to 1.3.11, TemplateLookup.gettemplate is vulnerable to path...
openSUSE 16 Security Update : python-Mako (openSUSE-SU-2026:20645-1)
The remote openSUSE 16 host has a package installed that is affected by a vulnerability as referenced in the openSUSE- SU-2026:20645-1 advisory. This update for python-Mako fixes the following issue: - CVE-2026-41205: Prior to 1.3.11, TemplateLookup.gettemplate is vulnerable to path traversal...
Security update for python-Mako (important)
openSUSE security update: security update for python-mako ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:20645-1 Rating: important References: bsc1262716 Cross-References: CVE-2026-41205 CVSS scores: CVE-2026-41205 SUSE : 7.5...
OPENSUSE-SU-2026:20645-1 Security update for python-Mako
This update for python-Mako fixes the following issue: - CVE-2026-41205: Prior to 1.3.11, TemplateLookup.gettemplate is vulnerable to path traversal bsc1262716...
SUSE-SU-2026:21426-1 Security update for python-Mako
This update for python-Mako fixes the following issue: - CVE-2026-41205: Prior to 1.3.11, TemplateLookup.gettemplate is vulnerable to path traversal bsc1262716...
python311-Mako-1.3.11-1.1 on GA media (moderate)
python311-Mako-1.3.11-1.1 on GA media Announcement ID: openSUSE-SU-2026:10616-1 Rating: moderate Cross-References: CVE-2026-41205 CVSS scores: CVE-2026-41205 SUSE : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N CVE-2026-41205 SUSE : 7.7...
OPENSUSE-SU-2026:10616-1 python311-Mako-1.3.11-1.1 on GA media
These are all security issues fixed in the python311-Mako-1.3.11-1.1 package on the GA media of openSUSE Tumbleweed...
MiracleLinux 8 : python-mako-1.0.6-14.el8 (AXSA:2023-5682:02)
The remote MiracleLinux 8 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2023-5682:02 advisory. mako: REDoS in Lexer class CVE-2022-40023 Tenable has extracted the preceding description block directly from the MiracleLinux security advisory. Note that...
MiracleLinux 9 : python-mako-1.1.4-6.el9 (AXSA:2023-5414:01)
The remote MiracleLinux 9 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2023-5414:01 advisory. python-mako: REDoS in Lexer class CVE-2022-40023 Tenable has extracted the preceding description block directly from the MiracleLinux security advisory. Note...
RockyLinux 9 : python-mako (RLSA-2023:2258)
The remote RockyLinux 9 host has a package installed that is affected by a vulnerability as referenced in the RLSA-2023:2258 advisory. python-mako: REDoS in Lexer class CVE-2022-40023 Tenable has extracted the preceding description block directly from the RockyLinux security advisory. Note that...
RockyLinux 8 : python-mako (RLSA-2023:2893)
The remote RockyLinux 8 host has a package installed that is affected by a vulnerability as referenced in the RLSA-2023:2893 advisory. mako: REDoS in Lexer class CVE-2022-40023 Tenable has extracted the preceding description block directly from the RockyLinux security advisory. Note that Nessus h...
RLSA-2023:2258 Moderate: python-mako security update
Mako is a template library written in Python. It provides a familiar, non-XML syntax which compiles into Python modules for maximum performance. Security Fixes: python-mako: REDoS in Lexer class CVE-2022-40023 For more details about the security issues, including the impact, a CVSS score,...
python-mako security update
An update is available for python-mako. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Mako is a template library written in Python. It provides a familiar,...