MEDIUM6.1crates.io
GHSA-5325-xw5m-phm3· CVE-2021-38193, RUSTSEC-2021-0074Cross-site Scripting in ammonia
Modified: 11/8/2023
package
crates.io/ammonia
pkg:crates.io/ammonia
HIGH7.5crates.io
GHSA-5hp8-35wj-m525· CVE-2019-15542, RUSTSEC-2019-0001Uncontrolled recursion in ammonia
Modified: 11/8/2023
LOWcrates.io
GHSA-mm7x-qfjj-5g2c· RUSTSEC-2025-0071Ammonia incorrectly handles embedded SVG and MathML leading to mutation XSS after removal
Modified: 9/10/2026
MEDIUMcrates.io
GHSA-p2g9-94wh-65c2· RUSTSEC-2022-0003Space bug in `clean_text`
Modified: 11/8/2023
HIGH7.5crates.io
RUSTSEC-2019-0001· CVE-2019-15542, GHSA-5hp8-35wj-m525Uncontrolled recursion leads to abort in HTML serialization
Modified: 11/8/2023
—crates.io
RUSTSEC-2021-0074· CVE-2021-38193, GHSA-5325-xw5m-phm3Incorrect handling of embedded SVG and MathML leads to mutation XSS
Modified: 11/8/2023
—crates.io
RUSTSEC-2022-0003· GHSA-p2g9-94wh-65c2Space bug in `clean_text`
Modified: 11/8/2023
—crates.io
RUSTSEC-2025-0071· GHSA-mm7x-qfjj-5g2cIncorrect handling of embedded SVG and MathML leads to mutation XSS after removal
Modified: 10/28/2025
—crates.io
RUSTSEC-2026-0193· CVE-2026-63430, GHSA-9jh8-v38h-cvhrmXSS in ammonia via MathML `annotation-xml` encoding strip
Modified: 7/17/2026
—crates.io
RUSTSEC-2026-0213· GHSA-m6mh-2hw2-555xXSS in ammonia via SVG `animate` and `set` animation tags
Modified: 7/22/2026