Sanic Project Sanic — known CVE vulnerabilities

Every CVE whose affected-product data names Sanic Project Sanic, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (2)

• CVE-2022-35920 — CVSS 8.3 (high): Sanic is an opensource python web server/framework. Affected versions of sanic allow access to lateral directories when using `app.static`…
• CVE-2017-16762 — CVSS 7.5 (high): Sanic before 0.5.1 allows reading arbitrary files with directory traversal, as demonstrated by the /static/..%2f substring.