| Summary | scalar/astro v0.1.13 was discovered to contain an arbitrary file upload vulnerability in the the scalar_url query parameter of the Scalar Proxy endpoint. This vulnerability allows attackers to execute arbitrary code via uploading a crafted SVG file. |
|---|---|
| Publication Date | May 20, 2026, 1:16 a.m. |
| Registration Date | May 20, 2026, 4:13 a.m. |
| Last Update | May 20, 2026, 3:04 a.m. |