Skip to content
OpenAdvisories

Vendor

sanic-org

3 known vulnerabilities.

Products

1 result · Clear filters · Feed

  • Medium 6.5

    sanic chunked trailer request smuggling allows hidden second request execution

    Sanic is an opensource python web server/framework. In version 25.12.0, Sanic's core HTTP/1.1 chunked-body handling does not fully consume the trailer-part after the terminating zero chunk before reusing the keep-alive connection buffer. A remote unauthentica…