Sanic-Org Sanic vulnerabilities

1 known vulnerability affecting sanic-org/sanic.

Total CVEs

1

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

HIGH1

Vulnerabilities

Page 1 of 1

CVE-2022-35920HIGHCVSS 7.5v>= 22.0.0, < 22.6.1v>= 21.0.0, < 21.12.2+1 more2022-08-01

CVE-2022-35920 [HIGH] CWE-22 CVE-2022-35920: Sanic is an opensource python web server/framework. Affected versions of sanic allow access to later Sanic is an opensource python web server/framework. Affected versions of sanic allow access to lateral directories when using `app.static` if using encoded `%2F` URLs. Parent directory traversal is not impacted. Users are advised to upgrade. There is no known workaround for this issue.