Skip to main content
cve.nowby Sazabi
← PyPI
PyPIPackage

sanic

3 known vulnerabilities (1 high, 1 medium), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
3 · 1 high, 1 medium
Registry
PyPI

Advisories 3

  • CVE-2026-85078Medium 6.5

    sanic chunked trailer request smuggling allows hidden second request execution

    Affected: fixed in 24.12.1; from 25.12.0, fixed in 25.12.1; fixed in 24.12.1; from 25.12.0, fixed in 25.12.1.

  • Improper Limitation of a Pathname to a Restricted Directory in sanic

    Affected: fixed in 20.12.7; from 22.0.0, fixed in 22.6.1; from 21.0.0, fixed in 21.12.2; from 22.0.0, fixed in 22.6.1; from 21.0.0, fixed in 21.12.2; fixed in 20.12.7.

  • Sanic before 0.5.1 allows reading arbitrary files with directory traversal, as demonstrated by the /static/..%2f substring.

    Affected: fixed in 0.5.1.