CVE-2022-40023

Source
https://nvd.nist.gov/vuln/detail/CVE-2022-40023
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-40023.json
Aliases
Related
Published
2022-09-07T13:15:09Z
Modified
2023-11-29T09:51:28.879788Z
Details

Sqlalchemy mako before 1.2.2 is vulnerable to Regular expression Denial of Service when using the Lexer class to parse. This also affects babelplugin and linguaplugin.

References

Affected packages

Alpine:v3.16 / py3-mako

Package

Name
py3-mako

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0The exact introduced commit is unknown
Fixed
1.2.2-r0

Affected versions

0.*

0.9.0-r0
0.9.1-r0
0.9.1-r1

1.*

1.0.0-r0
1.0.1-r0
1.0.2-r0
1.0.3-r0
1.0.6-r0
1.0.7-r0
1.0.7-r1
1.0.9-r0
1.0.11-r0
1.0.12-r0
1.1.0-r0
1.1.0-r1
1.1.0-r2
1.1.1-r0
1.1.2-r0
1.1.2-r1
1.1.2-r2
1.1.3-r0
1.1.3-r1
1.1.4-r0
1.1.4-r1
1.1.5-r0
1.1.5-r1
1.2.0-r1
1.2.1-r1

Alpine:v3.17 / py3-mako

Package

Name
py3-mako

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0The exact introduced commit is unknown
Fixed
1.2.2-r0

Affected versions

0.*

0.9.0-r0
0.9.1-r0
0.9.1-r1

1.*

1.0.0-r0
1.0.1-r0
1.0.2-r0
1.0.3-r0
1.0.6-r0
1.0.7-r0
1.0.7-r1
1.0.9-r0
1.0.11-r0
1.0.12-r0
1.1.0-r0
1.1.0-r1
1.1.0-r2
1.1.1-r0
1.1.2-r0
1.1.2-r1
1.1.2-r2
1.1.3-r0
1.1.3-r1
1.1.4-r0
1.1.4-r1
1.1.5-r0
1.1.5-r1
1.2.0-r1
1.2.1-r1

Alpine:v3.18 / py3-mako

Package

Name
py3-mako

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0The exact introduced commit is unknown
Fixed
1.2.2-r0

Affected versions

0.*

0.9.0-r0
0.9.1-r0
0.9.1-r1

1.*

1.0.0-r0
1.0.1-r0
1.0.2-r0
1.0.3-r0
1.0.6-r0
1.0.7-r0
1.0.7-r1
1.0.9-r0
1.0.11-r0
1.0.12-r0
1.1.0-r0
1.1.0-r1
1.1.0-r2
1.1.1-r0
1.1.2-r0
1.1.2-r1
1.1.2-r2
1.1.3-r0
1.1.3-r1
1.1.4-r0
1.1.4-r1
1.1.5-r0
1.1.5-r1
1.2.0-r0
1.2.1-r0

Git / github.com/sqlalchemy/mako

Affected ranges

Type
GIT
Repo
https://github.com/sqlalchemy/mako
Events
Introduced
0The exact introduced commit is unknown
Fixed
925760291d6efec64fda6e9dd1fd9cfbd5be068c

Affected versions

Other

rel_0_1_0
rel_0_1_1
rel_0_1_10
rel_0_1_2
rel_0_1_3
rel_0_1_4
rel_0_1_5
rel_0_1_6
rel_0_1_7
rel_0_1_8
rel_0_1_9
rel_0_2_0
rel_0_2_1
rel_0_2_2
rel_0_2_3
rel_0_2_4
rel_0_2_5
rel_0_3_0
rel_0_3_1
rel_0_3_2
rel_0_3_3
rel_0_3_4
rel_0_3_5
rel_0_3_6
rel_0_4_0
rel_0_4_1
rel_0_4_2
rel_0_5_0
rel_0_6_0
rel_0_6_1
rel_0_6_2
rel_0_7_0
rel_0_7_1
rel_0_7_2
rel_0_7_3
rel_0_8_0
rel_0_8_1
rel_0_9_0
rel_0_9_1
rel_1_0_0
rel_1_0_1
rel_1_0_10
rel_1_0_11
rel_1_0_12
rel_1_0_13
rel_1_0_14
rel_1_0_2
rel_1_0_3
rel_1_0_4
rel_1_0_5
rel_1_0_6
rel_1_0_7
rel_1_0_8
rel_1_0_9
rel_1_1_0
rel_1_1_1
rel_1_1_2
rel_1_1_3
rel_1_1_4
rel_1_1_5
rel_1_2_0
rel_1_2_1