VYPR

Sanic Cors

by Pypi

CVEs (1)

  • CVE-2026-37737Jun 5, 2026
    risk 0.00cvss epss

    sanic-cors version 2.2.0 and prior contains an improper regular expression in the try_match() function in sanic_cors/core.py that uses re.match without end-anchoring. This allows an attacker to bypass CORS origin allowlists by registering a domain that begins with a trusted…