ammonia vulnerabilities
CVEs whose affected-version data names the ammonia package (rust). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
6 CVEsRSS
RUSTSEC-2026-0373NoneMissing case-insensitive matching for CSS url function
Missing case-insensitive matching for CSS url function
CVE-2026-63430Medium· 6.3PoCammonia is a Rust library for repairing and securing untrusted HTML
ammonia is a Rust library for repairing and securing untrusted HTML. Prior to 3.3.2, 4.0.2, and 4.1.3, applications that explicitly allow the math tag, annotation-xml, and at least one raw-text HTML element while disallowing the encoding…
CVE-2026-102342Medium· 5.4ammonia is a Rust library for repairing and securing untrusted HTML
ammonia is a Rust library for repairing and securing untrusted HTML. Prior to 3.3.3, 4.0.3, and 4.1.4, applications that allow the SVG animate or set elements can retain an animation whose attributeName targets href and whose value uses …
RUSTSEC-2026-0213NoneXSS in ammonia via SVG `animate` and `set` animation tags
XSS in ammonia via SVG `animate` and `set` animation tags
RUSTSEC-2021-0158NoneXSS in ammonia via SVG `animateMotion`, `animateTransform`, and/or `animateColor` tags
XSS in ammonia via SVG `animateMotion`, `animateTransform`, and/or `animateColor` tags
RUSTSEC-2021-0157NoneIncorrect escaping for `url("")` functions in CSS style attributes
Incorrect escaping for `url("")` functions in CSS style attributes