Skip to content
OpenAdvisories

Package · PyPI

sanic

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

4 results · Feed

  • Medium 6.5
    CVE-2026-85078

    sanic chunked trailer request smuggling allows hidden second request execution

    Sanic is an opensource python web server/framework. In version 25.12.0, Sanic's core HTTP/1.1 chunked-body handling does not fully consume the trailer-part after the terminating zero chunk before reusing the keep-alive connection buffer. A remote unauthentica…

    sanic-org sanic sanic PyPI
  • High 8.3
    CVE-2022-35920

    Improper Limitation of a Pathname to a Restricted Directory in sanic

    Sanic is an opensource python web server/framework. Affected versions of sanic allow access to lateral directories when using `app.static` if using encoded `%2F` URLs. Parent directory traversal is not impacted. Users are advised to upgrade. There is no known…

    sanic-org sanic sanic PyPI
  • High —
    GHSA-7p79-6x2v-5h88

    Server crash if running Python 3.10 w/ Sanic 20.12

    **!!! ONLY APPLIES TO VERSIONS PRIOR TO Sanic v20.12 WHEN USING Python 3.10 !!!** Sanic v20.12 officially supports Python versions 3.6, 3.7, 3.8, and 3.9. However, if you accidentally run it with version 3.10 (**which is not supported by Sanic 20.12**), your …

    sanic PyPI
  • High 7.5
    CVE-2017-16762

    Sanic arbitrary file read and directory traversal

    Sanic before 0.5.1 allows reading arbitrary files with directory traversal, as demonstrated by the /static/..%2f substring.

    sanic PyPI