Skip to content
OpenAdvisories

Package · PyPI

sanic-cors

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Medium 6.5
    CVE-2026-37737

    sanic-cors contains an improper regular expression in the try_match() function

    sanic-cors version 2.2.0 and prior contains an improper regular expression in the try_match() function in sanic_cors/core.py that uses re.match without end-anchoring. This allows an attacker to bypass CORS origin allowlists by registering a domain that begins…

    sanic-cors PyPI