EUVD-2026-30944
GHSA-p2fw-q3jr-jfj3
Severity by source
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Primary rating from NVD · only source for this CVE.
CVSS VectorNVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Lifecycle Timeline
3DescriptionCVE.org
scalar/astro v0.1.13 was discovered to contain an arbitrary file upload vulnerability in the the scalar_url query parameter of the Scalar Proxy endpoint. This vulnerability allows attackers to execute arbitrary code via uploading a crafted SVG file.
AnalysisAI
Arbitrary code execution in Scalar Astro v0.1.13 allows remote unauthenticated attackers to upload malicious SVG files through the scalar_url query parameter of the Scalar Proxy endpoint. The flaw stems from inadequate validation in the proxy's file handling logic and, per CVSS, requires no authentication or user interaction, though EPSS rates real-world exploitation probability at only 0.02%. No public exploit identified at time of analysis, though a related XSS/Open-Redirect proof-of-concept repository is referenced.
Technical ContextAI
Scalar Astro is an integration of the Scalar API documentation toolkit with the Astro web framework, which exposes a server-side Scalar Proxy endpoint used to fetch and relay remote OpenAPI/Swagger documents. The vulnerability is classified as CWE-94 (Improper Control of Generation of Code, i.e. Code Injection): the proxy's scalar_url query parameter accepts attacker-controlled input that is then treated as an uploadable file, enabling a crafted SVG (which can contain embedded JavaScript or XML-based payloads) to be processed in a context where its contents are executed rather than safely served. CPE data is non-specific (cpe:2.3:a:n/a:n/a:*) so the exact downstream affected packages must be confirmed against the @scalar/astro npm package metadata.
RemediationAI
No vendor-released patch identified at time of analysis from the provided data; consult the NVD advisory at https://nvd.nist.gov/vuln/detail/CVE-2026-30117 and the @scalar/astro project repository for an upgraded version beyond 0.1.13 and apply it as soon as one is published. As compensating controls, disable or remove the Scalar Proxy endpoint if API documentation proxying is not required (trade-off: breaks the 'try it out' feature for remote OpenAPI specs), restrict access to the proxy route via authentication middleware or an allowlist of internal IPs at a reverse proxy (trade-off: blocks legitimate external doc viewers), and validate/sanitize the scalar_url parameter to allow only http(s) URLs pointing to trusted hosts while rejecting any responses whose Content-Type is image/svg+xml or whose body contains <script> or <foreignObject> elements (trade-off: SVG-based diagrams in OpenAPI docs will not render). Serve any proxied content with Content-Disposition: attachment and a strict Content-Security-Policy to prevent active SVG content from executing in the documentation origin.
Remote code execution in APScheduler (all versions through 3.10.x and 4.0.0a5) is achievable when applications deseriali
Unauthenticated remote OS command injection in MeiG Smart FORGE_SLT711 cellular gateway firmware MDM9607.LE.1.0-00110-ST
Unauthenticated API access in LalanaChami Pharmacy Management System (commit 5c3d028) allows remote attackers to dump al
In Citrix Cloud through 2025-11-10, an account with read-only access can trigger the beginning of a workflow for write o
Giflib 5.2.2 contains a buffer overflow in the EGifGCBToExtension function that fails to validate allocated memory when
Denial of service in GPAC's MP4Box multimedia tool (versions before 26.02.0) arises from a use-after-free in the gf_sei_
Arbitrary kernel memory read/write in Realtek rtl819x Jungle SDK Wi-Fi driver allows local unprivileged attackers to acc
Denial of service in GPAC's MP4Box/libgpac media importer (versions before 26.02.0) lets an attacker crash the tool by s
An issue in the parse_month function (/time/strptime.rs) of relibc commit ab6a2e allows attackers to cause a Denial of S
Denial of service in relibc (the Redox OS C standard library) at commit 61f42d allows attackers to crash a process by ge
An issue in the pthread_rwlockattr_setpshared() function of relibc commit 61f42d allows attackers to cause a Denial of S
Denial of service in relibc (the Redox OS C standard library implementation, commit 61f42d) lets attackers crash a proce
Same weakness CWE-94 – Code Injection
View allSame technique File Upload
View allShare
External POC / Exploit Code
Leaving vuln.today