mako vulnerabilities
CVEs whose affected-version data names the mako package (pip). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-44307HighMako vulnerable to path traversal via backslash URI on Windows in TemplateLookup
Mako vulnerable to path traversal via backslash URI on Windows in TemplateLookup
▾ Twilightmako · makoEPSS 0.61%via OSV
CVE-2026-41205High· 7.5Mako: Path traversal via double-slash URI prefix in TemplateLookup
Mako: Path traversal via double-slash URI prefix in TemplateLookup
▾ Twilightmako · makoEPSS 0.36%via OSV