Skip to content
OpenAdvisories

Package · crates.io

ammonia

10 known vulnerabilities.

1 result · Clear filters · Feed

  • Low —

    Ammonia incorrectly handles embedded SVG and MathML leading to mutation XSS after removal

    Affected versions of this crate did not correctly strip namespace-incompatible tags in certain situations, causing it to incorrectly account for differences between HTML, SVG, and MathML. This vulnerability only has an effect when the `svg` or `math` tag is a…