Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Mako is a template library written in Python. Prior to 1.3.12, on Windows, a URI using backslash traversal (e.g. \..\..\ secret.txt) bypasses the directory traversal check in Template.__init__ and the posixpath-based normalization in TemplateLookup.get_template(), allowing reads of files outside the configured template directory. This vulnerability is fixed in 1.3.12.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
CVE-2026-44307 Directory Traversal in Mako Template Library on Windows Versions Below 1.3.12 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-44307
Post summary
The post identifies CVE-2026-44307 as a directory traversal flaw in Mako Template Library for Windows versions below 1.3.12, with no additional exploit, patch, or usage details provided.
CVE-2026-44307 Mako is a template library written in Python. Prior to 1.3.12, on Windows, a URI using backslash traversal (e.g. \..\..\ secret.txt) bypasses the directory traversal … https://www.cve.org/CVERecord?id=CVE-2026-44307
Post summary
The snippet briefly describes a directory traversal vulnerability in Mako (CVE‑2026‑44307), noting the specific backslash traversal flaw, but provides no evidence of PoC, exploitation, patches, or false‑positive claims.
🔴 Mako, Path Traversal, #CVE-2026-44307 (High) https://dailycve.com/mako-path-traversal-cve-2026-44307-high/
Post summary
A new high‑severity path traversal vulnerability, CVE‑2026‑44307, has been disclosed for the Mako system.