Security

Report a vulnerability

SECURITY.md

Security Policy

Reporting a Vulnerability

chris@acroidea.com

Reflected XSS in the list_html function
GHSA-rjf8-2wcw-f6mp published Jan 8, 2026 by chrislearn

High
Stored XSS in the list_html function by uploading files with malicious names
GHSA-54m3-5fxr-2f3j published Jan 8, 2026 by chrislearn

High

Learn more about advisories related to salvo-rs/salvo in the GitHub Advisory Database