mako vulnerabilities
CVEs whose affected-version data names the mako package (pip). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-102991Medium· 6.5PoCMako is a template library written in Python
Mako is a template library written in Python. Prior to 1.4.2, on Windows, TemplateLookup.get_template() in mako/lookup.py resolves template URIs with posixpath, while Template.__init__() in mako/template.py validates them with os.path, w…
▾ Twilightsqlalchemy · makoEPSS 0.36%via NVD
CVE-2026-41205High· 7.5Mako: Path traversal via double-slash URI prefix in TemplateLookup
Mako: Path traversal via double-slash URI prefix in TemplateLookup
▾ Twilightmako · makoEPSS 0.36%via OSV