# What changed in mako

> 3 changes in mako 1 from its official release notes, upgrade guides and advisories: 3 security. Each one cited. Sources checked 2026-10-25. HTML: https://unstale.sh/pypi/mako/

To see which of these apply to a repository, run `npx @unstale/cli init` in it.

## mako 1

### Security

- Mako: Path traversal via drive-letter URI on Windows in TemplateLookup (1.4.2) — [security advisory](https://github.com/advisories/GHSA-5639-2J2P-M4MX)
- Mako vulnerable to path traversal via backslash URI on Windows in TemplateLookup (1.3.12) — [security advisory](https://github.com/advisories/GHSA-2H4P-VJRC-8XPQ)
- Mako: Path traversal via double-slash URI prefix in TemplateLookup (1.3.11) — [security advisory](https://github.com/advisories/GHSA-V92G-XGXW-VVMM)