Vulnerabilities for sanic

First version without a known vulnerability: 25.3.0

Details

• GHSA-wmj6-g64g-j7q52026-09-17

  sanic chunked trailer request smuggling allows hidden second request execution

  Fixed in: 24.12.1, 25.12.1

• GHSA-8cw9-5hmv-77w62022-08-06

  sanic vulnerable to Path Traversal when using `app.static` if using encoded `%2F` URLs

  Fixed in: 22.6.1, 21.12.2, 20.12.7

• GHSA-mpmf-hr8p-p49g2022-05-17

  Sanic arbitrary file read and directory traversal

  Fixed in: 0.5.1

• GHSA-7p79-6x2v-5h882022-02-16

  Server crash if running Python 3.10 w/ Sanic 20.12

  Fixed in: 20.12.6