HIGHPyPI
GHSA-2h4p-vjrc-8xpq· CVE-2026-44307, PYSEC-2026-2617Mako vulnerable to path traversal via backslash URI on Windows in TemplateLookup
Modified: 9/10/2026
package
PyPI/mako
pkg:pypi/mako
MEDIUM6.1PyPI
GHSA-7q8x-38mc-p84f· CVE-2010-2480, PYSEC-2010-1Mako contains Cross-site Scripting vulnerability
Modified: 9/30/2024
HIGH7.5PyPI
GHSA-v92g-xgxw-vvmm· CVE-2026-41205, PYSEC-2026-88Mako: Path traversal via double-slash URI prefix in TemplateLookup
Modified: 9/10/2026
HIGH7.5PyPI
GHSA-v973-fxgf-6xhp· CVE-2022-40023, PYSEC-2022-260mako is vulnerable to Regular Expression Denial of Service
Modified: 12/3/2025
—PyPI
PYSEC-2010-1· CVE-2010-2480, GHSA-7q8x-38mc-p84fModified: 6/10/2026
—PyPI
PYSEC-2022-260· CVE-2022-40023, GHSA-v973-fxgf-6xhpModified: 11/8/2023
—PyPI
PYSEC-2026-2617· CVE-2026-44307, GHSA-2h4p-vjrc-8xpqMako vulnerable to path traversal via backslash URI on Windows in TemplateLookup
Modified: 7/13/2026
HIGH7.5PyPI
PYSEC-2026-88· CVE-2026-41205, GHSA-v92g-xgxw-vvmmModified: 5/20/2026