Skip to content
OpenAdvisories

Vendor

sanic-org

3 known vulnerabilities.

Products

sanic 3
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.2
    CVE-2026-85077

    Sanic: HTTP response header injection via missing CR/LF validation in Sanic HTTP/1.1 responses

    Sanic is an opensource python web server/framework. Prior to version 24.12.1, and in version 25.12.0, the HTTP/1.1 response pipeline in sanic/response/types.py serializes response header names and values without rejecting carriage-return or line-feed characte…

    sanic-org sanic
  • High 8.3
    CVE-2022-35920

    Improper Limitation of a Pathname to a Restricted Directory in sanic

    Sanic is an opensource python web server/framework. Affected versions of sanic allow access to lateral directories when using `app.static` if using encoded `%2F` URLs. Parent directory traversal is not impacted. Users are advised to upgrade. There is no known…

    sanic-org sanic sanic PyPI