← Back

Sanic

sanic

Vendor: Sanic Project • 2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2022-35920
1Sanic Project
1Sanic
Jun 17, 2026
Aug 1, 2022
N/A· v4
7.5 HIGH· v3
N/A· v2
Sanic is an opensource python web server/framework. Affected versions of sanic allow access to lateral directories when using `app.static` if using encoded `%2F` URLs. Parent directory traversal is not impacted. Users ar...Show more
Sanic is an opensource python web server/framework. Affected versions of sanic allow access to lateral directories when using `app.static` if using encoded `%2F` URLs. Parent directory traversal is not impacted. Users are advised to upgrade. There is no known workaround for this issue.Show less
CVE-2017-16762
1Sanic Project
1Sanic
May 13, 2026
Nov 10, 2017
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
Sanic before 0.5.1 allows reading arbitrary files with directory traversal, as demonstrated by the /static/..%2f substring.