CVE-2026-33241

CVE-2026-33241 impacts the Salvo Rust web framework (versions prior to 0.89.3), where its form data parsing implementations fail to enforce payload size limits. This high-severity vulnerability (CVSS 7.5 HIGH) allows an unauthenticated attacker to send extremely large payloads, causing Out-of-Memory conditions and leading to denial of service. Exploitation is straightforward with low attack complexity, requiring no user interaction. Currently, there is no evidence of active exploitation, public exploit code, or significant community discussion. Organizations using Salvo should upgrade to version 0.89.3 or later to mitigate this risk.