MEDIUM6.1crates.io
GHSA-5325-xw5m-phm3· CVE-2021-38193, RUSTSEC-2021-0074Cross-site Scripting in ammonia
Modified: 11/8/2023
package
pkg:crates.io/ammonia
Cross-site Scripting in ammonia
Modified: 11/8/2023
Uncontrolled recursion in ammonia
Modified: 11/8/2023
Ammonia incorrectly handles embedded SVG and MathML leading to mutation XSS after removal
Modified: 9/10/2026
Space bug in `clean_text`
Modified: 11/8/2023
Uncontrolled recursion leads to abort in HTML serialization
Modified: 11/8/2023
Incorrect handling of embedded SVG and MathML leads to mutation XSS
Modified: 11/8/2023
Space bug in `clean_text`
Modified: 11/8/2023
Incorrect handling of embedded SVG and MathML leads to mutation XSS after removal
Modified: 10/28/2025
mXSS in ammonia via MathML `annotation-xml` encoding strip
Modified: 7/17/2026
XSS in ammonia via SVG `animate` and `set` animation tags
Modified: 7/22/2026