Sanic Project

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

Sanic Project records in CISA KEV

No Sanic Project vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

2 records

TI-2022-16347 CVE-2022-35920 · GHSA-8cw9-5hmv-77w6

HIGH 75

Sanic is an opensource python web server/framework.

CVSS 3.1HIGH 8.3 Network No auth No interaction EPSS 0.01199 Published 2022-08-01 Fixed in 22.6.1, 21.12.2 +1 CWE-22

TI-2017-12322 CVE-2017-16762 · GHSA-mpmf-hr8p-p49g

LOW 38

Sanic before 0.5.1 allows reading arbitrary files with directory traversal, as demonstrated by the /static/..%2f substring.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.02494 Published 2017-11-10 Fixed in 0.5.1 CWE-22