Vendor
sanic-org
3 known vulnerabilities.
Products
1 result · Clear filters · Feed
-
Medium 6.5
sanic chunked trailer request smuggling allows hidden second request execution
Sanic is an opensource python web server/framework. In version 25.12.0, Sanic's core HTTP/1.1 chunked-body handling does not fully consume the trailer-part after the terminating zero chunk before reusing the keep-alive connection buffer. A remote unauthentica…