https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-14T21:21:33.763744+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-22257 CVE-2026-22257 — Salvo is vulnerable to stored XSS in the list_html function by uploading files with malicious names 2026-10-14T21:21:33.764943+00:00

Affected: salvo-rs salvo

Salvo is a Rust web backend framework. Prior to version 0.88.1, the function list_html generates a file view of a folder without sanitizing the files or folders names, this may potentially lead to XSS in cases where a website allow the access to public files using this feature and anyone can upload a file. This issue has been patched in version 0.88.1.