CVE-2026-33241 - Vulnerability Analysis

Overview

Salvo Rust web framework < 0.89.3 contains an out-of-memory vulnerability caused by lack of payload size enforcement in form data parsing, letting attackers cause denial of service by sending large payloads, exploit requires crafted large request payload.

Severity & Score

Impact

Attackers can cause service crashes and denial of service by sending extremely large payloads.

Mitigation

Upgrade to version 0.89.3 or later.

References

• https://github.com/salvo-rs/salvo/releases/tag/v0.89.3
• https://github.com/salvo-rs/salvo/security/advisories/GHSA-pp9r-xg4c-8j4x

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner