{"id":"GHSA-7p79-6x2v-5h88","aliases":[],"url":"https://o3.security/vulnerability/GHSA-7p79-6x2v-5h88","summary":"Server crash if running Python 3.10 w/ Sanic 20.12","details":"**!!! ONLY APPLIES TO VERSIONS PRIOR TO Sanic v20.12 WHEN USING Python 3.10 !!!**\n\nSanic v20.12 officially supports Python versions 3.6, 3.7, 3.8, and 3.9. However, if you accidentally run it with version 3.10 (**which is not supported by Sanic 20.12**), your server is prone to crashing on an incoming web request.\n\n### Impact\nAnyone running Sanic server between 0.1.7 and 20.12 **using Python 3.10**.\n\n### Patches\n[Sanic v20.12.6](https://github.com/sanic-org/sanic/releases/tag/v20.12.6)\n\n### Workarounds\nUse a supported version of Python (v3.6 - v3.9)\n\n### References\n> In [asyncio](https://docs.python.org/3/library/asyncio.html#module-asyncio), the explicit passing of a loop argument has been deprecated and will be removed in version 3.10 for the following: ... [asyncio.Event](https://docs.python.org/3/library/asyncio-sync.html#asyncio.Event)\n\n[Python 3.8 Release Notes](https://docs.python.org/3/whatsnew/3.8.html#deprecated)\n\n### For more information\nIf you have any questions or comments about this advisory:\n* Open an issue in [the community forums](https://community.sanicframework.org/)\n* Ping us on [the Discord server](https://discord.gg/FARQzAEMAA)\n","published":"2022-02-16T22:57:57Z","modified":"2024-12-05T05:30:48.003313Z","cvss":null,"epss":null,"cisaKev":null,"exploitsKnown":0,"affectedPackages":[{"ecosystem":"PyPI","name":"sanic","fixedVersion":"20.12.6"}],"fix":null,"references":[{"type":"WEB","url":"https://github.com/sanic-org/sanic/security/advisories/GHSA-7p79-6x2v-5h88"},{"type":"PACKAGE","url":"https://github.com/sanic-org/sanic"},{"type":"WEB","url":"https://github.com/sanic-org/sanic/releases/tag/v20.12.6"}],"provenance":{"sources":["OSV.dev","FIRST.org (EPSS)"],"lastVerified":"2024-12-05T05:30:48.003313Z"}}