{"api_version":"v1","generated_at":"2026-10-06T00:05:00+00:00","product":{"cve_count":3,"evidence_gap_note":"Official registry publication history is linked, but a publisher support or retirement boundary has not been established.","id":"security:cve-sqlalchemy-mako-4e69b0070c3b","lifecycle_state":"evidence_gap","linked_lifecycle_url":"https://lifecycle.blacktree.nl/libraries/npm/mako","name":"mako","next_cursor":null,"observations":[{"affected":"mako: < 1.4.2","affected_versions_present":true,"cve_id":"CVE-2026-102991","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-102991","fixed":"1.4.2.","last_modified":"2026-09-30T19:54:41.077Z","patch_url":"https://github.com/sqlalchemy/mako/security/advisories/GHSA-5639-2j2p-m4mx","primary_source":"","published":"2026-09-30T19:47:07.128Z"},{"affected":"< 1.3.12","affected_versions_present":true,"cve_id":"CVE-2026-44307","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-44307","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-05-13T15:00:13.642Z","patch_url":"","primary_source":"","published":"2026-05-12T21:53:52.826Z"},{"affected":"< 1.3.11","affected_versions_present":true,"cve_id":"CVE-2026-41205","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-41205","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-05-20T01:32:18.382Z","patch_url":"https://github.com/sqlalchemy/mako/security/advisories/GHSA-v92g-xgxw-vvmm","primary_source":"","published":"2026-04-23T18:52:24.194Z"}],"source_generated_at":"2026-10-05T06:20:29.126Z","vendor":"sqlalchemy"}}