PT-2026-2187

Name of the Vulnerable Software and Affected Versions Salvo versions prior to 0.88.1 Description Salvo is a Rust web backend framework. The list html function generates a file view of a folder without sanitizing file or folder names. This can lead to Cross-Site Scripting XSS if a website allows...

salvo 跨站脚本漏洞

salvo is a web framework for Salvo open source . A cross-site scripting vulnerability exists in versions prior to salvo 0.88.1 , the vulnerability stems from the listhtml function does not properly clean up the path , which could lead to reflective cross-site scripting attacks...

Malicious code in test-mlw2-salvo-garbo (npm)

The package test-mlw2-salvo-garbo was found to contain malicious code...

MAL-2025-36165 Malicious code in test-mlw2-salvo-garbo (npm)

The package test-mlw2-salvo-garbo was found to contain malicious code...

Malicious code in test-mlw2-tifts-salvo (npm)

The package test-mlw2-tifts-salvo was found to contain malicious code...

MAL-2025-36454 Malicious code in test-mlw2-tifts-salvo (npm)

The package test-mlw2-tifts-salvo was found to contain malicious code...

novel (0.4.2), salvo (>=0.1.5, <=0.1.6) +4 more potentially affected by unknown CVE via double-checked-cell (>=1.1.0, <=2.1.0)

double-checked-cell CARGO version =1.1.0, =0.1.5, =0.1.5, =0.1.5, =0.1.0, =1.0.0, =1.0.4 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2022-0024...

Windows-Specific Relative Path Traversal vulnerability in StaticDir server

Description The fix released in version 0.19.1 does not completely fix the relative path traversal vulnerability on Windows hosts. An attacker can access files outside of the configured directory root. This is due to Windows supporting the \ character as a path separator. Proof of Concept With a...