Known vulnerabilities in Mako

Vendor: SQLAlchemy
Software: Mako
Software CPE: cpe:2.3:a:sqlalchemy:mako:*:*:*:*:*:*:*:*
Total vulnerabilities: 3
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Mako Mako is affected by 3 known vulnerabilities: 3 medium Critical High Medium Low

Vulnerabilities (3)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU128467 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-44307
CWE-22 Medium
No
No
1.3.12 29.04.2026 SB2026042970
SB2026080522
#VU128398 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-41205
CWE-22 Medium
No
No
1.3.11 28.04.2026 SB20260428216
SB2026050603
SB2026051399
and 2 more
#VU67555 - Incorrect Regular Expression
CVE-2022-40023
CWE-185 Medium
No
No
1.2.2 21.09.2022 SB2022092139
SB2022092141
SB2022102426
and 20 more