-
CVSS Score
-Basic Information
CVE ID
-
GHSA ID
-
EPSS Score
-
CWE
-
Published
-
Updated
-
KEV Status
-
Technology
-
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| sanic | pip | < 0.5.1 | 0.5.1 |
PythonPythonMiggo AIRoot Cause AnalysisThe vulnerability manifests in static file handling where path normalization was insufficient. The GitHub PR #635 that fixed this references directory traversal in static routes, and CVE description specifically mentions the '/static/..%2f' attack pattern. The static route registration function Sanic.static would be responsible for configuring static file serving, making it the logical location for improper path sanitization. The high confidence comes from the vulnerability's direct relationship to static file handling and the patched version's release notes confirming security fixes.
Ongoing coverage of React2Shell