Skip to content
OpenAdvisories

Package · Debian

rust-ammonia

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 6.3
    CVE-2026-63430

    ammonia: mXSS in ammonia via MathML `annotation-xml` encoding strip

    ammonia is a Rust library for repairing and securing untrusted HTML. Prior to 3.3.2, 4.0.2, and 4.1.3, applications that explicitly allow the math tag, annotation-xml, and at least one raw-text HTML element while disallowing the encoding attribute can permit …

    rust-ammonia ammonia ammonia rust-ammonia Debian Ubuntu crates.io
  • Medium 5.4
    CVE-2026-102342

    ammonia allows stored XSS through unsanitized SVG animate and set attributes

    ammonia is a Rust library for repairing and securing untrusted HTML. Prior to 3.3.3, 4.0.3, and 4.1.4, applications that allow the SVG animate or set elements can retain an animation whose attributeName targets href and whose value uses the javascript scheme.…

    rust-ammonia ammonia ammonia rust-ammonia Debian Ubuntu crates.io
  • Medium 6.1
    CVE-2021-38193

    Cross-site Scripting in ammonia

    An issue was discovered in the ammonia crate before 3.1.0 for Rust. XSS can occur because the parsing differences for HTML, SVG, and MathML are mishandled, a similar issue to CVE-2020-26870.

    ammonia rust-ammonia rust-ammonia Debian Ubuntu crates.io