Mako

Every one of the 4 is a mark on the map. Named now: 1 to 4, most at risk first.

1. Sqlalchemy mako before 1.2.2 is vulnerable to Regular expression Denial of Service when using the Lexer class to parse. This also affects babelplugin and linguaplugin.CVE-2022-40023Sqlalchemy · 2.3% likely

   CWE-1333

2. Mako: Path traversal via backslash URI on Windows in TemplateLookupCVE-2026-44307sqlalchemy · CVSS 8.7 · 0.7% likely

   CWE-22

3. Mako: Path traversal via double-slash URI prefix in TemplateLookupCVE-2026-41205sqlalchemy · CVSS 7.7 · 0.4% likely

   CWE-22

4. Mako: Path traversal via drive-letter URI on Windows in TemplateLookupCVE-2026-102991sqlalchemy · CVSS 6.5 · 0.4% likely

   CWE-22

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.