{"api_version":"v1","generated_at":"2026-10-09T19:20:00+00:00","product":{"cve_count":4,"evidence_gap_note":"Official registry publication history is linked, but a publisher support or retirement boundary has not been established.","id":"security:cve-salvo-rs-salvo-ad8598a405d6","lifecycle_state":"evidence_gap","linked_lifecycle_url":"https://lifecycle.blacktree.nl/libraries/npm/salvo","name":"salvo","next_cursor":null,"observations":[{"affected":"< 0.89.3","affected_versions_present":true,"cve_id":"CVE-2026-33241","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-33241","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2026-03-25T19:22:48.083Z","patch_url":"https://github.com/salvo-rs/salvo/releases/tag/v0.89.3","primary_source":"","published":"2026-03-23T23:41:50.533Z"},{"affected":">= 0.39.0, < 0.89.3","affected_versions_present":true,"cve_id":"CVE-2026-33242","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-33242","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2026-03-24T15:12:45.439Z","patch_url":"https://github.com/salvo-rs/salvo/commit/7bac30e6960355c58e358e402072d4a3e5c4e1bb#diff-e319bf7afcb577f7e9f4fb767005072f6335d23f306dd52e8c94f3d222610d02R20","primary_source":"","published":"2026-03-23T23:40:39.886Z"},{"affected":"< 0.88.1","affected_versions_present":true,"cve_id":"CVE-2026-22257","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-22257","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2026-01-08T18:38:12.920Z","patch_url":"https://github.com/salvo-rs/salvo/blob/16efeba312a274739606ce76366d921768628654/crates/serve-static/src/dir.rs#L581","primary_source":"","published":"2026-01-08T18:22:05.661Z"},{"affected":"< 0.88.1","affected_versions_present":true,"cve_id":"CVE-2026-22256","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-22256","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2026-01-08T18:39:58.946Z","patch_url":"https://github.com/salvo-rs/salvo/blob/16efeba312a274739606ce76366d921768628654/crates/serve-static/src/dir.rs#L593","primary_source":"","published":"2026-01-08T18:21:57.861Z"}],"source_generated_at":"2026-10-09T06:17:25.511Z","vendor":"salvo-rs"}}