Most recent entries from all https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 05:46:41 +0000 CVE-2026-41205 — Mako: Path traversal via double-slash URI prefix in TemplateLookup https://db.gcve.eu/vuln/cve-2026-41205 <p><strong>Affected:</strong> sqlalchemy mako</p> <p>Mako is a template library written in Python. Prior to 1.3.11, TemplateLookup.get_template() is vulnerable to path traversal when a URI starts with // (e.g., //../../../secret.txt). The root cause is an inconsistency between two slash-stripping implementations. Any file readable by the process can be returned as rendered template content when an application passes untrusted input directly to TemplateLookup.get_template(). This vulnerability is fixed in 1.3.11.</p> <p><strong>Affected:</strong> sqlalchemy mako</p> <p>Mako is a template library written in Python. Prior to 1.3.11, TemplateLookup.get_template() is vulnerable to path traversal when a URI starts with // (e.g., //../../../secret.txt). The root cause is an inconsistency between two slash-stripping implementations. Any file readable by the process can be returned as rendered template content when an application passes untrusted input directly to TemplateLookup.get_template(). This vulnerability is fixed in 1.3.11.</p> https://db.gcve.eu/vuln/cve-2026-41205 USN-8234-1 — python-mako vulnerability https://db.gcve.eu/vuln/usn-8234-1 <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: mako, Ubuntu:Pro:18.04:LTS: mako, Ubuntu:Pro:20.04:LTS: mako, Ubuntu:22.04:LTS: mako, Ubuntu:24.04:LTS: mako, Ubuntu:25.10: mako, Ubuntu:26.04:LTS: mako</p> <p>It was discovered that Mako incorrectly handled URIs with double-slash prefixes in TemplateLookup. A remote attacker could possibly use this issue to obtain sensitive information.</p> <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: mako, Ubuntu:Pro:18.04:LTS: mako, Ubuntu:Pro:20.04:LTS: mako, Ubuntu:22.04:LTS: mako, Ubuntu:24.04:LTS: mako, Ubuntu:25.10: mako, Ubuntu:26.04:LTS: mako</p> <p>It was discovered that Mako incorrectly handled URIs with double-slash prefixes in TemplateLookup. A remote attacker could possibly use this issue to obtain sensitive information.</p> https://db.gcve.eu/vuln/usn-8234-1