Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

debian логотип

CVE-2022-40023

Опубликовано: 07 сент. 2022
Источник: debian
EPSS Низкий

Описание

Sqlalchemy mako before 1.2.2 is vulnerable to Regular expression Denial of Service when using the Lexer class to parse. This also affects babelplugin and linguaplugin.

Пакеты

ПакетСтатусВерсия исправленияРелизТип
makofixed1.2.2+ds1-1package

Примечания

  • https://github.com/sqlalchemy/mako/commit/925760291d6efec64fda6e9dd1fd9cfbd5be068c (rel_1_2_2)

  • https://github.com/sqlalchemy/mako/issues/366

EPSS

Процентиль: 75%
0.01718
Низкий

Связанные уязвимости

CVSS3: 7.5
ubuntu
почти 4 года назад

Sqlalchemy mako before 1.2.2 is vulnerable to Regular expression Denial of Service when using the Lexer class to parse. This also affects babelplugin and linguaplugin.

CVSS3: 7.5
redhat
почти 4 года назад

Sqlalchemy mako before 1.2.2 is vulnerable to Regular expression Denial of Service when using the Lexer class to parse. This also affects babelplugin and linguaplugin.

CVSS3: 7.5
nvd
почти 4 года назад

Sqlalchemy mako before 1.2.2 is vulnerable to Regular expression Denial of Service when using the Lexer class to parse. This also affects babelplugin and linguaplugin.

CVSS3: 7.5
msrc
почти 4 года назад

Sqlalchemy mako before 1.2.2 is vulnerable to Regular expression Denial of Service when using the Lexer class to parse. This also affects babelplugin and linguaplugin.

suse-cvrf
больше 3 лет назад

Security update for python-Mako

EPSS

Процентиль: 75%
0.01718
Низкий