Sanic-org vulnerabilities
We track 2 vulnerabilities in Sanic-org products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on September 17, 2026.
2vulnerabilities
0critical
2high
0exploited
7.8average CVSS score
Latest Sanic-org vulnerabilities
- 8.2 High severity
sanic: Improper Neutralization of CRLF Sequences in HTTP Headers
Sanic is an opensource python web server/framework. Prior to version 24.12.1, and in version 25.12.0, the HTTP/1.1 response pipeline in sanic/response/types.py serializes response header names and values without rejecting carriage-return or line-feed character
- 7.5 High severity
sanic: Improper Limitation of a Pathname to a Restricted Directory
Sanic is an opensource python web server/framework. Affected versions of sanic allow access to lateral directories when using `app.static` if using encoded `%2F` URLs. Parent directory traversal is not impacted. Users are advised to upgrade. There is no known