sanic vulnerabilities

2 known vulnerabilities in sanic from Sanic-org. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.2 High severity

  sanic: Improper Neutralization of CRLF Sequences in HTTP Headers

  CVE-2026-85077Sep 17, 2026Sanic-org

  Sanic is an opensource python web server/framework. Prior to version 24.12.1, and in version 25.12.0, the HTTP/1.1 response pipeline in sanic/response/types.py serializes response header names and values without rejecting carriage-return or line-feed character

• 7.5 High severity

  sanic: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2022-35920Aug 1, 2022Sanic-orgEPSS 1.2%

  Sanic is an opensource python web server/framework. Affected versions of sanic allow access to lateral directories when using `app.static` if using encoded `%2F` URLs. Parent directory traversal is not impacted. Users are advised to upgrade. There is no known