| Package | Affected versions | Patched versions |
|---|---|---|
| sanic | ≥ 21.0.0, < 21.12.2≥ 22.0.0, < 22.6.1< 20.12.7 | 21.12.222.6.120.12.7 |
| sanic | ≥ 21.0.0, < 21.12.2≥ 22.0.0, < 22.6.1< 20.12.7 | 21.12.222.6.120.12.7 |
Access to lateral directories when using app.static if using encoded %2F URLs. Parent directory traversal is not impacted.
https://github.com/sanic-org/sanic/issues/2478 https://github.com/sanic-org/sanic/pull/2495
If you have any questions or comments about this advisory:
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free