CVE-2026-22256
1 advisory.
crates.io/salvo CVE-2026-22256: high 8.8
Salvo is vulnerable to reflected XSS in the list_html function
Action: Upgrade salvo to 0.88.1 or later.
cargo update -p salvo --precise 0.88.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.88.1 | - |
Fixed versions
| 0.88.1 |
Sources
- osv: GHSA-rjf8-2wcw-f6mp
- https://github.com/salvo-rs/salvo/security/advisories/GHSA-rjf8-2wcw-f6mp
- https://nvd.nist.gov/vuln/detail/CVE-2026-22256
- https://github.com/salvo-rs/salvo
- https://github.com/salvo-rs/salvo/blob/16efeba312a274739606ce76366d921768628654/crates/serve-static/src/dir.rs#L593
CVE-2026-22256 · published · modified · JSON