EUVD-2026-30944
GHSA-p2fw-q3jr-jfj3
Severity by source
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Primary rating from Vendor (mitre) · only source for this CVE.
CVSS VectorVendor: mitre
Lifecycle Timeline
3DescriptionCVE.org
scalar/astro v0.1.13 was discovered to contain an arbitrary file upload vulnerability in the the scalar_url query parameter of the Scalar Proxy endpoint. This vulnerability allows attackers to execute arbitrary code via uploading a crafted SVG file.
AnalysisAI
Arbitrary code execution in Scalar Astro v0.1.13 allows remote unauthenticated attackers to upload malicious SVG files through the scalar_url query parameter of the Scalar Proxy endpoint. The flaw stems from inadequate validation in the proxy's file handling logic and, per CVSS, requires no authentication or user interaction, though EPSS rates real-world exploitation probability at only 0.02%. No public exploit identified at time of analysis, though a related XSS/Open-Redirect proof-of-concept repository is referenced.
Technical ContextAI
Scalar Astro is an integration of the Scalar API documentation toolkit with the Astro web framework, which exposes a server-side Scalar Proxy endpoint used to fetch and relay remote OpenAPI/Swagger documents. The vulnerability is classified as CWE-94 (Improper Control of Generation of Code, i.e. Code Injection): the proxy's scalar_url query parameter accepts attacker-controlled input that is then treated as an uploadable file, enabling a crafted SVG (which can contain embedded JavaScript or XML-based payloads) to be processed in a context where its contents are executed rather than safely served. CPE data is non-specific (cpe:2.3:a:n/a:n/a:*) so the exact downstream affected packages must be confirmed against the @scalar/astro npm package metadata.
RemediationAI
No vendor-released patch identified at time of analysis from the provided data; consult the NVD advisory at https://nvd.nist.gov/vuln/detail/CVE-2026-30117 and the @scalar/astro project repository for an upgraded version beyond 0.1.13 and apply it as soon as one is published. As compensating controls, disable or remove the Scalar Proxy endpoint if API documentation proxying is not required (trade-off: breaks the 'try it out' feature for remote OpenAPI specs), restrict access to the proxy route via authentication middleware or an allowlist of internal IPs at a reverse proxy (trade-off: blocks legitimate external doc viewers), and validate/sanitize the scalar_url parameter to allow only http(s) URLs pointing to trusted hosts while rejecting any responses whose Content-Type is image/svg+xml or whose body contains <script> or <foreignObject> elements (trade-off: SVG-based diagrams in OpenAPI docs will not render). Serve any proxied content with Content-Disposition: attachment and a strict Content-Security-Policy to prevent active SVG content from executing in the documentation origin.
LibreNMS before 24.10.0 allows a remote attacker to execute arbitrary code via OS command injection involving AboutContr
Reachable assertion in Open5GS up to version 2.7.6 allows remote unauthenticated attackers to crash the Diameter CER han
A Command Injection issue in the payload build page in BYOB (Build Your Own Botnet) 2.0 allows attackers to execute arbi
Denial of service in Open5GS 2.7.6 and earlier allows network-adjacent attackers with low-privilege Diameter Gx peer acc
Denial of service in Open5GS HSS (Home Subscriber Server) versions 2.7.0 through 2.7.6 is triggered remotely by manipula
Remote command injection in Control Web Panel allows unauthenticated attackers to execute arbitrary OS commands as root
LINQPad before 5.52.01 Pro edition is vulnerable to Unsafe Deserialization in LINQPad.AutoRefManager::PopulateFromCache(
Remote code execution in dash-uploader (Python package for Plotly Dash) versions 0.1.0 through 0.7.0a2 allows unauthenti
Command injection in LiteLLM 1.18.10 lets attackers who can configure MCP (Model Context Protocol) servers supply arbitr
SQL injection in AzuraCast's backup restore flow (versions up to and including 0.23.7) lets an attacker achieve privileg
Arbitrary file read in Yu AI Code Mother v4.3 lets anonymous, remote attackers retrieve files outside the intended previ
Remote code execution in APScheduler (all versions through 3.10.x and 4.0.0a5) is achievable when applications deseriali
Same weakness CWE-94 – Code Injection
View allShare
External POC / Exploit Code
Leaving vuln.today