Skip to content
OpenAdvisories

Vendor

rust-ammonia

2 known vulnerabilities.

Products

ammonia 2
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.3
    CVE-2026-63430

    ammonia: mXSS in ammonia via MathML `annotation-xml` encoding strip

    ammonia is a Rust library for repairing and securing untrusted HTML. Prior to 3.3.2, 4.0.2, and 4.1.3, applications that explicitly allow the math tag, annotation-xml, and at least one raw-text HTML element while disallowing the encoding attribute can permit …

    rust-ammonia ammonia ammonia rust-ammonia Debian Ubuntu crates.io
  • Medium 5.4
    CVE-2026-102342

    ammonia allows stored XSS through unsanitized SVG animate and set attributes

    ammonia is a Rust library for repairing and securing untrusted HTML. Prior to 3.3.3, 4.0.3, and 4.1.4, applications that allow the SVG animate or set elements can retain an animation whose attributeName targets href and whose value uses the javascript scheme.…

    rust-ammonia ammonia rust ammonia Debian Ubuntu Azure Linux crates.io