Login Request a demo
SA
Product
sanic
by sanic-org · last CVE Sep 17, 2026
3
CVEs
0
On KEV
8.2
Max CVSS
0
New 30D
Vulnerabilities3In the news0Timeline
Severity mix
Critical 0High 2Medium 1Low 0
Severity
All severities3Critical0High2Medium1Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add sanic to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-85077
8.2
0%
Sep 17
Sanic: HTTP response header injection via missing CR/LF validation in Sanic HTTP/1.1 responses
Affected: < 24.12.1; >= 25.12.0, < 25.12.1
CVE-2022-35920
7.5
1%
Aug 1
Improper Limitation of a Pathname to a Restricted Directory in sanic
Affected: >= 22.0.0, < 22.6.1; >= 21.0.0, < 21.12.2; < 20.12.7
CVE-2026-85078
6.5
1%
Sep 17
sanic chunked trailer request smuggling allows hidden second request execution
Affected: < 24.12.1; >= 25.12.0, < 25.12.1
Showing 3