Sanic_project Sanic
2 CVEs affecting Sanic_project Sanic. Latest disclosed: 2022-08-01. Critical: 0, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-35920 | High | 8.3 | 2022-08-01 | Sanic is an opensource python web server/framework. Affected versions of sanic allow access to lateral directories when using `app.static` if using encoded `%2… |
CVE-2017-16762 | High | 7.5 | 2017-11-10 | Sanic before 0.5.1 allows reading arbitrary files with directory traversal, as demonstrated by the /static/..%2f substring. |