Sanic — CVE history (PyPI)

Sanic

4 CVEs affect the Sanic PyPI package (highest CVSS 8.3). Latest disclosed: 2026-09-17. Full CVE history sourced from NVD.

Summary

Package
Sanic (PyPI)
Total CVEs
4
Actively exploited (CISA KEV)
0
Highest CVSS
8.3
Latest disclosed
2026-09-17

Recent CVEs (top 4)

CVESeverityCVSSKEVPublishedSummary
CVE-2026-85078Medium6.5—2026-09-17Sanic is an opensource python web server/framework.
CVE-2026-85077High8.2—2026-09-17Sanic is an opensource python web server/framework.
CVE-2022-35920High8.3—2022-08-01Sanic is an opensource python web server/framework.
CVE-2017-16762High7.5—2017-11-10Sanic before 0.5.1 allows reading arbitrary files with directory traversal, as demonstrated by the /static/..%2f substring.

All-time worst (top 4 by CVSS)

CVESeverityCVSSKEVPublishedSummary
CVE-2022-35920High8.3—2022-08-01Sanic is an opensource python web server/framework.
CVE-2026-85077High8.2—2026-09-17Sanic is an opensource python web server/framework.
CVE-2017-16762High7.5—2017-11-10Sanic before 0.5.1 allows reading arbitrary files with directory traversal, as demonstrated by the /static/..%2f substring.
CVE-2026-85078Medium6.5—2026-09-17Sanic is an opensource python web server/framework.