sanic project vulnerabilities

Products

• sanic 2

Latest sanic project CVEs

Newest publication first

1. CVE-2022-35920 Improper Limitation of a Pathname to a Restricted Directory in sanic

   Published 2022-08-01

   High·CVSS 7.5 EPSS 1.2%

   Sanic is an opensource python web server/framework. Affected versions of sanic allow access to lateral directories when using app.static if using encoded %2F URLs. Parent directory traversal is not impacted. Users are advised to upgrade. There is no known workaround for this issu...

2. CVE-2017-16762 Sanic arbitrary file read and directory traversal

   Published 2017-11-10

   High·CVSS 7.5 EPSS 2.5%

   Sanic before 0.5.1 allows reading arbitrary files with directory traversal, as demonstrated by the /static/..%2f substring.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.