{"id":"GHSA-7p79-6x2v-5h88","aliases":[],"status":"published","title":"Server crash if running Python 3.10 w/ Sanic 20.12","description":"**!!! ONLY APPLIES TO VERSIONS PRIOR TO Sanic v20.12 WHEN USING Python 3.10 !!!**\n\nSanic v20.12 officially supports Python versions 3.6, 3.7, 3.8, and 3.9. However, if you accidentally run it with version 3.10 (**which is not supported by Sanic 20.12**), your server is prone to crashing on an incoming web request.\n\n### Impact\nAnyone running Sanic server between 0.1.7 and 20.12 **using Python 3.10**.\n\n### Patches\n[Sanic v20.12.6](https://github.com/sanic-org/sanic/releases/tag/v20.12.6)\n\n### Workarounds\nUse a supported version of Python (v3.6 - v3.9)\n\n### References\n\u003e In [asyncio](https://docs.python.org/3/library/asyncio.html#module-asyncio), the explicit passing of a loop argument has been deprecated and will be removed in version 3.10 for the following: ... [asyncio.Event](https://docs.python.org/3/library/asyncio-sync.html#asyncio.Event)\n\n[Python 3.8 Release Notes](https://docs.python.org/3/whatsnew/3.8.html#deprecated)\n\n### For more information\nIf you have any questions or comments about this advisory:\n* Open an issue in [the community forums](https://community.sanicframework.org/)\n* Ping us on [the Discord server](https://discord.gg/FARQzAEMAA)","facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2022-02-16T22:57:57Z","modified":"2024-12-05T05:30:48Z","fixes":[{"ecosystem":"PyPI","package":"sanic","fixed_in":["20.12.6"],"sources":["ghsa","osv"]}],"affected":[{"source":"ghsa","ecosystem":"PyPI","package":"sanic","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0.1.7"},{"fixed":"20.12.6"}]}]},{"source":"osv","ecosystem":"PyPI","package":"sanic","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0.1.7"},{"fixed":"20.12.6"}]}],"versions":["0.1.7","0.1.8","0.1.9","0.2.0","0.3.0","0.3.1","0.4.0","0.4.1","0.5.0","0.5.1","0.5.2","0.5.4","0.6.0","0.7.0","0.8.0","0.8.1","0.8.2","0.8.3","18.12.0","19.12.0","19.12.2","19.12.3","19.12.4","19.12.5","19.3.1","19.6.0","19.6.2","19.6.3","19.9.0","20.12.0","20.12.1","20.12.2","20.12.3","20.12.4","20.12.5","20.3.0","20.6.0","20.6.1","20.6.2","20.6.3","20.9.0","20.9.1"]}],"references":[{"url":"https://github.com/sanic-org/sanic/security/advisories/GHSA-7p79-6x2v-5h88","tags":["web"]},{"url":"https://github.com/sanic-org/sanic/releases/tag/v20.12.6","tags":["web"]},{"url":"https://github.com/advisories/GHSA-7p79-6x2v-5h88"},{"url":"https://github.com/sanic-org/sanic","tags":["package"]}],"sources":{"ghsa":[{"id":"GHSA-7p79-6x2v-5h88","title":"Server crash if running Python 3.10 w/ Sanic 20.12","description":"**!!! ONLY APPLIES TO VERSIONS PRIOR TO Sanic v20.12 WHEN USING Python 3.10 !!!**\n\nSanic v20.12 officially supports Python versions 3.6, 3.7, 3.8, and 3.9. However, if you accidentally run it with version 3.10 (**which is not supported by Sanic 20.12**), your server is prone to crashing on an incoming web request.\n\n### Impact\nAnyone running Sanic server between 0.1.7 and 20.12 **using Python 3.10**.\n\n### Patches\n[Sanic v20.12.6](https://github.com/sanic-org/sanic/releases/tag/v20.12.6)\n\n### Workarounds\nUse a supported version of Python (v3.6 - v3.9)\n\n### References\n\u003e In [asyncio](https://docs.python.org/3/library/asyncio.html#module-asyncio), the explicit passing of a loop argument has been deprecated and will be removed in version 3.10 for the following: ... [asyncio.Event](https://docs.python.org/3/library/asyncio-sync.html#asyncio.Event)\n\n[Python 3.8 Release Notes](https://docs.python.org/3/whatsnew/3.8.html#deprecated)\n\n### For more information\nIf you have any questions or comments about this advisory:\n* Open an issue in [the community forums](https://community.sanicframework.org/)\n* Ping us on [the Discord server](https://discord.gg/FARQzAEMAA)\n","status":"published","published":"2022-02-16T22:57:57Z","modified":"2023-01-11T05:04:55Z","updated_at":"2026-11-02T14:36:12.361159Z"}],"osv":[{"id":"GHSA-7p79-6x2v-5h88","title":"Server crash if running Python 3.10 w/ Sanic 20.12","description":"**!!! ONLY APPLIES TO VERSIONS PRIOR TO Sanic v20.12 WHEN USING Python 3.10 !!!**\n\nSanic v20.12 officially supports Python versions 3.6, 3.7, 3.8, and 3.9. However, if you accidentally run it with version 3.10 (**which is not supported by Sanic 20.12**), your server is prone to crashing on an incoming web request.\n\n### Impact\nAnyone running Sanic server between 0.1.7 and 20.12 **using Python 3.10**.\n\n### Patches\n[Sanic v20.12.6](https://github.com/sanic-org/sanic/releases/tag/v20.12.6)\n\n### Workarounds\nUse a supported version of Python (v3.6 - v3.9)\n\n### References\n\u003e In [asyncio](https://docs.python.org/3/library/asyncio.html#module-asyncio), the explicit passing of a loop argument has been deprecated and will be removed in version 3.10 for the following: ... [asyncio.Event](https://docs.python.org/3/library/asyncio-sync.html#asyncio.Event)\n\n[Python 3.8 Release Notes](https://docs.python.org/3/whatsnew/3.8.html#deprecated)\n\n### For more information\nIf you have any questions or comments about this advisory:\n* Open an issue in [the community forums](https://community.sanicframework.org/)\n* Ping us on [the Discord server](https://discord.gg/FARQzAEMAA)\n","status":"published","published":"2022-02-16T22:57:57Z","modified":"2024-12-05T05:30:48.003313Z","updated_at":"2026-11-02T15:46:41.349637Z"}]}}