prassan10/XSS-Open-Redirect-via-scalar_url

Releases0

CVE History

CVE	Published	CVSS v3	CVSS v2
CVE-2026-30117 ↗	May 19, 2026Tuesday, 19 May 2026, 16:16	9.8 CRITICAL	—
scalar/astro v0.1.13 was discovered to contain an arbitrary file upload vulnerability in the the scalar_url query parameter of the Scalar Proxy endpoint. This vulnerability allows attackers to execute arbitrary code via uploading a crafted SVG file.