CVE-2026-44307

Mako is a template library written in Python. Prior to 1.3.12, on Windows, a URI using backslash traversal (e.g. \..\..\ secret.txt) bypasses the directory traversal check in Template.__init__ and the posixpath-based normalization in TemplateLookup.get_template(), allowing reads of files outside the configured template directory. This vulnerability is fixed in 1.3.12.

• CWE-22

• https://github.com/sqlalchemy/mako/commit/72e10c573ca0fbcbddd4455abca8ce92a61780d7
• https://github.com/sqlalchemy/mako/issues/435
• https://github.com/sqlalchemy/mako/releases/tag/rel_1_3_12
• https://github.com/sqlalchemy/mako/security/advisories/GHSA-2h4p-vjrc-8xpq

Published

May 12, 2026

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-44300OpenCost provides cost monitoring for Kubernetes workloads a…8.8
• CVE-2026-44301Hugo is a static site generator. From 0.43 to before 0.161.0…8.1
• CVE-2026-44302Snappier is a high performance C# implementation of the Snap…7.5
• CVE-2026-44304Lemur manages TLS certificate creation. Prior to 1.9.0, Lemu…8.1
• CVE-2026-44305Lemur manages TLS certificate creation. Prior to 1.9.0, when…6.8
• CVE-2026-44306Statamic is a Laravel and Git powered content management sys…5.3
• CVE-2026-44308Spring Cloud AWS simplifies using AWS managed services in a …6.3
• CVE-2026-44309Gitsign is a keyless Sigstore to signing tool for Git commit…5.3
• CVE-2026-4431The Easy Post Submission plugin for WordPress is vulnerable …9.1
• CVE-2026-44310Gitsign is a keyless Sigstore to signing tool for Git commit…5.4
• CVE-2026-44311Fabric.js is a Javascript HTML5 canvas library. Prior to 7.4…6.1
• CVE-2026-44312css_parser is a Ruby CSS parser. Prior to 2.1.0 and 1.22.0, …5.8