You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Sqlalchemy mako before 1.2.2 is vulnerable to Regular expression Denial of Service when using the Lexer class to parse. This also affects babelplugin and linguaplugin.
✔️ This issue was automatically closed by Mend because the vulnerable library in the specific branch(es) was either marked as ignored or it is no longer part of the Mend inventory.
mend-for-github-combot
changed the title
CVE-2022-40023 (High) detected in Mako-1.1.4-py2.py3-none-any.whl
CVE-2022-40023 (High) detected in Mako-1.1.4-py2.py3-none-any.whl - autoclosed
May 6, 2024
CVE-2022-40023 - High Severity Vulnerability
Vulnerable Library - Mako-1.1.4-py2.py3-none-any.whl
A super-fast templating language that borrows the best ideas from the existing templating languages.
Library home page: https://files.pythonhosted.org/packages/f3/54/dbc07fbb20865d3b78fdb7cf7fa713e2cba4f87f71100074ef2dc9f9d1f7/Mako-1.1.4-py2.py3-none-any.whl
Path to dependency file: /requirements.txt
Path to vulnerable library: /requirements.txt
Dependency Hierarchy:
Found in HEAD commit: 815ae0afebcf867f02143f3ab9cf88b1d4dacdec
Found in base branch: master
Vulnerability Details
Sqlalchemy mako before 1.2.2 is vulnerable to Regular expression Denial of Service when using the Lexer class to parse. This also affects babelplugin and linguaplugin.
Publish Date: 2022-09-07
URL: CVE-2022-40023
CVSS 3 Score Details (7.5)
Base Score Metrics:
Suggested Fix
Type: Upgrade version
Release Date: 2022-09-07
Fix Resolution: Mako - 1.2.2
The text was updated successfully, but these errors were encountered: