A vulnerability identified as problematic has been detected in salvo-rs salvo up to 0.88.0. This impacts the function list_html of the file /files. This manipulation causes cross site scripting.

This vulnerability is registered as CVE-2026-22256. Remote exploitation of the attack is possible. No exploit is available.

You should upgrade the affected component.