~ / search / GHSA-5325-xw5m-phm3

GHSA-5325-xw5m-phm3

Cross-site Scripting in ammonia

Source: GitHub Advisory Database (reviewed) Moderate CVE-2021-38193

Packages

EcosystemPackageAffectedFixed in
crates.io ammonia >= 3.0.0, < 3.1.0 3.1.0
crates.io ammonia < 2.1.3 2.1.3

Details

As written in the advisory (Markdown source, shown as plain text).

An issue was discovered in the ammonia crate before 3.1.0 for Rust. XSS can occur because the parsing differences for HTML, SVG, and MathML are mishandled, a similar issue to CVE-2020-26870.

References

External links from the advisory. They lead to third-party sites.