CVE-2022-40023: Debian Linux

High severity, CVSS 7.5. EPSS: 2.2% chance of exploitation in the next 30 days.

Sqlalchemy mako before 1.2.2 is vulnerable to Regular expression Denial of Service when using the Lexer class to parse. This also affects babelplugin and linguaplugin.

Affected products

• Debian Debian Linux: version 10.0 only
• Sqlalchemy Mako: before 1.2.2 (fixed in 1.2.2)

Published 2022-09-07. Last modified 2026-06-17.