HIGH8.8crates.io
GHSA-54m3-5fxr-2f3j· CVE-2026-22257Salvo is vulnerable to stored XSS in the list_html function by uploading files with malicious names
Modified: 2/3/2026
package
crates.io/salvo
pkg:crates.io/salvo
HIGH7.5crates.io
GHSA-f842-phm9-p4v4· CVE-2026-33242Salvo has a Path Traversal in salvo-proxy::encode_url_path allows API Gateway Bypass
Modified: 3/25/2026
HIGHcrates.io
GHSA-pp9r-xg4c-8j4x· CVE-2026-33241Salvo Affected by Denial of Service via Unbounded Memory Allocation in Form Data Parsing
Modified: 3/25/2026
HIGH8.8crates.io
GHSA-rjf8-2wcw-f6mp· CVE-2026-22256Salvo is vulnerable to reflected XSS in the list_html function
Modified: 2/3/2026