sanic vulnerabilities

CVEs whose affected-version data names the sanic package (pip). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

3 CVEsRSS

CVE-2026-85078Medium· 6.5

5d ago

Sanic is an opensource python web server/framework

Sanic is an opensource python web server/framework. In version 25.12.0, Sanic's core HTTP/1.1 chunked-body handling does not fully consume the trailer-part after the terminating zero chunk before reusing the keep-alive connection buffer.…

▾ Sunlitsanic-org · sanicEPSS 0.30%via NVD

CVE-2026-85077High· 8.2

5d ago

Sanic is an opensource python web server/framework

Sanic is an opensource python web server/framework. Prior to version 24.12.1, and in version 25.12.0, the HTTP/1.1 response pipeline in sanic/response/types.py serializes response header names and values without rejecting carriage-return…

▾ Twilightsanic-org · sanicEPSS 0.27%via NVD

CVE-2022-35920High· 8.3

4y ago

sanic vulnerable to Path Traversal when using `app.static` if using encoded `%2F` URLs

▾ Twilightsanic · sanicEPSS 1.1%via OSV