CVE-2026-22257

The record

Salvo is a Rust web backend framework. Prior to version 0.88.1, the function list_html generates a file view of a folder without sanitizing the files or folders names, this may potentially lead to XSS in cases where a website allow the access to public files using this feature and anyone can upload a file. This issue has been patched in version 0.88.1.

Affected packages

Related vulnerabilities

• GHSA-54m3-5fxr-2f3j Salvo is vulnerable to stored XSS in the list_html function by uploading files with… Same vulnerability
• CVE-2026-33241 Salvo is a Rust web framework. Also affects salvo
• CVE-2026-33242 Salvo is a Rust web framework. Also affects salvo
• GHSA-pp9r-xg4c-8j4x Salvo Affected by Denial of Service via Unbounded Memory Allocation in Form Data Parsing Also affects salvo
• GHSA-f842-phm9-p4v4 Salvo has a Path Traversal in salvo-proxy::encode_url_path allows API Gateway Bypass Also affects salvo
• GHSA-rjf8-2wcw-f6mp Salvo is vulnerable to reflected XSS in the list_html function Also affects salvo
• CVE-2026-22256 Salvo is a Rust web backend framework. Also affects salvo
• CVE-2026-96379 Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting")… CWE-79