sanic-org/sanic
GitHub
Releases89
Frequency1 month 1 week
Last Release
Stars18.6K
Accelerate your web app development | Build fast. Run fast.
CVE History
| CVE | Affected | Published | CVSS v3 | CVSS v2 |
|---|---|---|---|---|
| >= 22.0.0, < 22.6.1, >= 21.0.0, < 21.12.2, < 20.12.7 | 8.3 HIGH | — | ||
Sanic is an opensource python web server/framework. Affected versions of sanic allow access to lateral directories when using `app.static` if using encoded `%2F` URLs. Parent directory traversal is not impacted. Users are advised to upgrade. There is no known workaround for this issue. | ||||
| <= 0.5.0, < 0.5.1 | — | 5 MEDIUM | ||
Sanic before 0.5.1 allows reading arbitrary files with directory traversal, as demonstrated by the /static/..%2f substring. | ||||