CVE-2022-40023

See a problem?
Please try reporting it to the source first.

Source

https://nvd.nist.gov/vuln/detail/CVE-2022-40023

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-40023.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2022-40023

Aliases

Related

Published

2022-09-07T13:15:09Z

Modified

2024-12-05T15:35:06.710607Z

Severity

7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator

Summary

[none]

Details

Sqlalchemy mako before 1.2.2 is vulnerable to Regular expression Denial of Service when using the Lexer class to parse. This also affects babelplugin and linguaplugin.

References

Affected packages

Alpine:v3.16 / py3-mako

Package

Name: py3-mako
Purl: pkg:apk/alpine/py3-mako?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.2.2-r0

Affected versions

0.*

0.9.0-r0

0.9.1-r0

0.9.1-r1

1.*

1.0.0-r0

1.0.1-r0

1.0.2-r0

1.0.3-r0

1.0.6-r0

1.0.7-r0

1.0.7-r1

1.0.9-r0

1.0.11-r0

1.0.12-r0

1.1.0-r0

1.1.0-r1

1.1.0-r2

1.1.1-r0

1.1.2-r0

1.1.2-r1

1.1.2-r2

1.1.3-r0

1.1.3-r1

1.1.4-r0

1.1.4-r1

1.1.5-r0

1.1.5-r1

1.2.0-r0

1.2.1-r0

Alpine:v3.17 / py3-mako

Package

Name: py3-mako
Purl: pkg:apk/alpine/py3-mako?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.2.2-r0

Affected versions

0.*

0.9.0-r0

0.9.1-r0

0.9.1-r1

1.*

1.0.0-r0

1.0.1-r0

1.0.2-r0

1.0.3-r0

1.0.6-r0

1.0.7-r0

1.0.7-r1

1.0.9-r0

1.0.11-r0

1.0.12-r0

1.1.0-r0

1.1.0-r1

1.1.0-r2

1.1.1-r0

1.1.2-r0

1.1.2-r1

1.1.2-r2

1.1.3-r0

1.1.3-r1

1.1.4-r0

1.1.4-r1

1.1.5-r0

1.1.5-r1

1.2.0-r0

1.2.1-r0

Alpine:v3.18 / py3-mako

Package

Name: py3-mako
Purl: pkg:apk/alpine/py3-mako?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.2.2-r0

Affected versions

0.*

0.9.0-r0

0.9.1-r0

0.9.1-r1

1.*

1.0.0-r0

1.0.1-r0

1.0.2-r0

1.0.3-r0

1.0.6-r0

1.0.7-r0

1.0.7-r1

1.0.9-r0

1.0.11-r0

1.0.12-r0

1.1.0-r0

1.1.0-r1

1.1.0-r2

1.1.1-r0

1.1.2-r0

1.1.2-r1

1.1.2-r2

1.1.3-r0

1.1.3-r1

1.1.4-r0

1.1.4-r1

1.1.5-r0

1.1.5-r1

1.2.0-r0

1.2.1-r0

Alpine:v3.19 / py3-mako

Package

Name: py3-mako
Purl: pkg:apk/alpine/py3-mako?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.2.2-r0

Affected versions

0.*

0.9.0-r0

0.9.1-r0

0.9.1-r1

1.*

1.0.0-r0

1.0.1-r0

1.0.2-r0

1.0.3-r0

1.0.6-r0

1.0.7-r0

1.0.7-r1

1.0.9-r0

1.0.11-r0

1.0.12-r0

1.1.0-r0

1.1.0-r1

1.1.0-r2

1.1.1-r0

1.1.2-r0

1.1.2-r1

1.1.2-r2

1.1.3-r0

1.1.3-r1

1.1.4-r0

1.1.4-r1

1.1.5-r0

1.1.5-r1

1.2.0-r0

1.2.1-r0

Alpine:v3.20 / py3-mako

Package

Name: py3-mako
Purl: pkg:apk/alpine/py3-mako?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.2.2-r0

Affected versions

0.*

0.9.0-r0

0.9.1-r0

0.9.1-r1

1.*

1.0.0-r0

1.0.1-r0

1.0.2-r0

1.0.3-r0

1.0.6-r0

1.0.7-r0

1.0.7-r1

1.0.9-r0

1.0.11-r0

1.0.12-r0

1.1.0-r0

1.1.0-r1

1.1.0-r2

1.1.1-r0

1.1.2-r0

1.1.2-r1

1.1.2-r2

1.1.3-r0

1.1.3-r1

1.1.4-r0

1.1.4-r1

1.1.5-r0

1.1.5-r1

1.2.0-r0

1.2.1-r0

Alpine:v3.21 / py3-mako

Package

Name: py3-mako
Purl: pkg:apk/alpine/py3-mako?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.2.2-r0

Affected versions

0.*

0.9.0-r0

0.9.1-r0

0.9.1-r1

1.*

1.0.0-r0

1.0.1-r0

1.0.2-r0

1.0.3-r0

1.0.6-r0

1.0.7-r0

1.0.7-r1

1.0.9-r0

1.0.11-r0

1.0.12-r0

1.1.0-r0

1.1.0-r1

1.1.0-r2

1.1.1-r0

1.1.2-r0

1.1.2-r1

1.1.2-r2

1.1.3-r0

1.1.3-r1

1.1.4-r0

1.1.4-r1

1.1.5-r0

1.1.5-r1

1.2.0-r0

1.2.1-r0

Debian:11 / mako

Package

Name: mako
Purl: pkg:deb/debian/mako?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

1.*

1.1.3+ds1-2

1.1.3+ds1-3

1.2.2+ds1-1

1.2.4+ds-1

1.2.4+ds-2

1.3.1-1

1.3.2-1

1.3.5-1

1.3.5-1.1

1.3.6-1

Ecosystem specific

{
    "urgency": "not yet assigned"
}

Debian:12 / mako

Package

Name: mako
Purl: pkg:deb/debian/mako?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.2.2+ds1-1

Ecosystem specific

{
    "urgency": "not yet assigned"
}

Debian:13 / mako

Package

Name: mako
Purl: pkg:deb/debian/mako?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.2.2+ds1-1

Ecosystem specific

{
    "urgency": "not yet assigned"
}

Git / github.com/sqlalchemy/mako

Affected ranges

Type: GIT
Repo: https://github.com/sqlalchemy/mako
Events: Introduced

0 Unknown introduced commit / All previous commits are affected

Fixed

925760291d6efec64fda6e9dd1fd9cfbd5be068c

Affected versions

Other

rel_0_1_0

rel_0_1_1

rel_0_1_10

rel_0_1_2

rel_0_1_3

rel_0_1_4

rel_0_1_5

rel_0_1_6

rel_0_1_7

rel_0_1_8

rel_0_1_9

rel_0_2_0

rel_0_2_1

rel_0_2_2

rel_0_2_3

rel_0_2_4

rel_0_2_5

rel_0_3_0

rel_0_3_1

rel_0_3_2

rel_0_3_3

rel_0_3_4

rel_0_3_5

rel_0_3_6

rel_0_4_0

rel_0_4_1

rel_0_4_2

rel_0_5_0

rel_0_6_0

rel_0_6_1

rel_0_6_2

rel_0_7_0

rel_0_7_1

rel_0_7_2

rel_0_7_3

rel_0_8_0

rel_0_8_1

rel_0_9_0

rel_0_9_1

rel_1_0_0

rel_1_0_1

rel_1_0_10

rel_1_0_11

rel_1_0_12

rel_1_0_13

rel_1_0_14

rel_1_0_2

rel_1_0_3

rel_1_0_4

rel_1_0_5

rel_1_0_6

rel_1_0_7

rel_1_0_8

rel_1_0_9

rel_1_1_0

rel_1_1_1

rel_1_1_2

rel_1_1_3

rel_1_1_4

rel_1_1_5

rel_1_2_0

rel_1_2_1