datasette (>=0.14.0, <=0.28.0), datasette-core (0.22.1) +13 more potentially affected by CVE-2022-35920 via sanic (0.7.0)

sanic PYPI version 0.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on sanic and may be impacted: - datasette =0.14.0, =0.1.0, =1.0.3, =0.8.8, =0.1.0, =0.4.3, =0.1.5, =1.1.4 - slashcommands 0.4.0 - turingnetwork 0.1.1 Source cves: CVE-2022-35920 Sour...

1942pyc (7.0.1), 667bot (1.0.0) +60 more potentially affected by CVE-2022-35920 via sanic (>=21.3.2, <=21.12.1)

sanic PYPI version =21.3.2, =1.0.0, =0.0.1, =0.4.9, =0.0.1, =2.3.14, =0.0.1, =0.1.8 - elpepe 1.0.1 - ewanbit 0.1.100 and more Source cves: CVE-2022-35920 Source advisory: OSV:PYSEC-2026-918...

allennlp (>=0.1.0a6, <=0.3.0), datasette (>=0.8.0, <=0.13.0) +1 more potentially affected by CVE-2022-35920 via sanic (0.6.0)

sanic PYPI version 0.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on sanic and may be impacted: - allennlp =0.1.0a6, =0.8.0, =0.6.0.0, =0.6.0.1 Source cves: CVE-2022-35920 Source advisory: OSV:PYSEC-2026-918...

entrance (>=0.0.1, <=0.0.5), eventy (>=2.1.1, <=2.5.0) +5 more potentially affected by CVE-2022-35920 via sanic (0.8.3)

sanic PYPI version 0.8.3 is affected by a known vulnerability. The following packages have a transitive dependency on sanic and may be impacted: - entrance =0.0.1, =2.1.1, =0.2.0, =0.0.0, =0.1.0, =0.2.0 - swarmer 0.3.0 Source cves: CVE-2022-35920 Source advisory: OSV:PYSEC-2026-918...

sanic-dispatcher (>=0.5.0, <=0.5.0.1) potentially affected by CVE-2022-35920 via sanic (0.5.0)

sanic PYPI version 0.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on sanic and may be impacted: - sanic-dispatcher =0.5.0, =0.5.0.1 Source cves: CVE-2022-35920 Source advisory: OSV:PYSEC-2026-918...

sanic-dispatcher (>=0.5.2.0, <=0.5.2.1) potentially affected by CVE-2022-35920 via sanic (0.5.2)

sanic PYPI version 0.5.2 is affected by a known vulnerability. The following packages have a transitive dependency on sanic and may be impacted: - sanic-dispatcher =0.5.2.0, =0.5.2.1 Source cves: CVE-2022-35920 Source advisory: OSV:PYSEC-2026-918...

lager-cli (>=0.1.127, <=0.1.175), py-easy-rest (>=0.4.2, <=0.4.7) +3 more potentially affected by CVE-2022-35920 via sanic (>=22.3.0, <=22.6.0)

sanic PYPI version =22.3.0, =0.1.127, =0.4.2, =3.0.0.dev1, =3.4.3 Source cves: CVE-2022-35920 Source advisory: OSV:PYSEC-2026-918...

rsanic (>=0.1.1, <=0.4.0) potentially affected by CVE-2022-35920 via sanic (0.3.1)

sanic PYPI version 0.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on sanic and may be impacted: - rsanic =0.1.1, =0.4.0 Source cves: CVE-2022-35920 Source advisory: OSV:PYSEC-2026-918...

aiocqhttp-sanic (>=1.2.3a1, <=1.2.3), ax (>=0.39.0, <=0.42.0) +11 more potentially affected by CVE-2022-35920 via sanic (19.3.1)

sanic PYPI version 19.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on sanic and may be impacted: - aiocqhttp-sanic =1.2.3a1, =0.39.0, =1.4.2rc1, =1.0.0rc1, =0.1.0a1, =0.3.0, =0.1.0, =0.3.0, =0.7.0 Source cves: CVE-2022-35920 Source advisory:...

aclients (>=1.0.0b31, <=1.0.1b1), iconrpcserver (>=1.2.10, <=1.4.9) +12 more potentially affected by CVE-2022-35920 via sanic (18.12.0)

sanic PYPI version 18.12.0 is affected by a known vulnerability. The following packages have a transitive dependency on sanic and may be impacted: - aclients =1.0.0b31, =1.2.10, =0.1.0, =0.1.0, =0.24.0, =0.14.0a8, =0.0.0.post2, =0.0.1, =2.0.0, =0.1.0, =0.2.2 Source cves: CVE-2022-35920 Source...

ax (>=0.43.0, <=0.52.0), convo-nlu (0.1.0) +17 more potentially affected by CVE-2022-35920 via sanic (19.12.2)

sanic PYPI version 19.12.2 is affected by a known vulnerability. The following packages have a transitive dependency on sanic and may be impacted: - ax =0.43.0, =0.0.4, =0.0.1, =0.1.3, =2024.10.27.post1, =0.23.5, =1.5.0, =0.1.0, =2.6.1, =3.10.2rc3 and more Source cves: CVE-2022-35920 Source...

entrance (>=0.0.1, <=0.0.5), eventy (>=2.1.1, <=2.5.0) +5 more potentially affected by CVE-2022-35920 via sanic (0.8.3)

sanic PYPI version 0.8.3 is affected by a known vulnerability. The following packages have a transitive dependency on sanic and may be impacted: - entrance =0.0.1, =2.1.1, =0.2.0, =0.0.0, =0.1.0, =0.2.0 - swarmer 0.3.0 Source cves: CVE-2022-35920 Source advisory: OSV:GHSA-8CW9-5HMV-77W6...

rsanic (>=0.1.1, <=0.4.0) potentially affected by CVE-2022-35920 via sanic (0.3.1)

sanic PYPI version 0.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on sanic and may be impacted: - rsanic =0.1.1, =0.4.0 Source cves: CVE-2022-35920 Source advisory: OSV:GHSA-8CW9-5HMV-77W6...

aiocqhttp-sanic (>=1.2.3a1, <=1.2.3), ax (>=0.39.0, <=0.42.0) +11 more potentially affected by CVE-2022-35920 via sanic (19.3.1)

sanic PYPI version 19.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on sanic and may be impacted: - aiocqhttp-sanic =1.2.3a1, =0.39.0, =1.4.2rc1, =1.0.0rc1, =0.1.0a1, =0.3.0, =0.1.0, =0.3.0, =0.7.0 Source cves: CVE-2022-35920 Source advisory:...

1942pyc (7.0.1), 667bot (1.0.0) +60 more potentially affected by CVE-2022-35920 via sanic (>=21.3.2, <=21.12.1)

sanic PYPI version =21.3.2, =1.0.0, =0.0.1, =0.4.9, =0.0.1, =2.3.14, =0.0.1, =0.1.8 - elpepe 1.0.1 - ewanbit 0.1.100 and more Source cves: CVE-2022-35920 Source advisory: GHSA-8CW9-5HMV-77W6...

lager-cli (>=0.1.127, <=0.1.175), py-easy-rest (>=0.4.2, <=0.4.7) +3 more potentially affected by CVE-2022-35920 via sanic (>=22.3.0, <=22.6.0)

sanic PYPI version =22.3.0, =0.1.127, =0.4.2, =3.0.0.dev1, =3.4.3 Source cves: CVE-2022-35920 Source advisory: OSV:GHSA-8CW9-5HMV-77W6...

CVE-2022-35920

creationtimestamp| type| source ---|---|--- 2022-08-02 02:17:19+00:00| seen| https://t.me/cibsecurity/47393...

aclients (>=1.0.0b31, <=1.0.1b1), aiocqhttp-sanic (>=1.2.3a1, <=1.2.3) +100 more potentially affected by CVE-2022-35920 via sanic (>=0.3.1, <=20.12.2)

sanic PYPI version =0.3.1, =1.0.0b31, =1.2.3a1, =0.1.0a6, =0.0.3, =0.6.1, =0.39.0, =0.0.19, =1.2.8, =1.2.12 and more Source cves: CVE-2022-35920 Source advisory: MEND:CVE-2022-35920...

1942pyc (7.0.1), 667bot (1.0.0) +60 more potentially affected by CVE-2022-35920 via sanic (>=21.3.2, <=21.12.1)

sanic PYPI version =21.3.2, =1.0.0, =0.0.1, =0.4.9, =0.0.1, =2.3.14, =0.0.1, =0.1.8 - elpepe 1.0.1 - ewanbit 0.1.100 and more Source cves: CVE-2022-35920 Source advisory: MEND:CVE-2022-35920...

CVE-2022-35920 Improper Limitation of a Pathname to a Restricted Directory in sanic

Sanic is an opensource python web server/framework. Affected versions of sanic allow access to lateral directories when using app.static if using encoded %2F URLs. Parent directory traversal is not impacted. Users are advised to upgrade. There is no known workaround for this issue...