Lucene search
+L

ammonia: mXSS via MathML `annotation-xml` encoding strip

🗓️ 22 Oct 2026 14:06:10Reported by GitHub Advisory DatabaseType 
github
 github
🔗 github.com👁 4 Views

mXSS in ammonia via MathML `annotation-xml` encoding strip allows arbitrary JavaScript injection.

Related
Detection
Refs
ReporterTitlePublishedViews
Family
circl
Circl
CVE-2026-63430
15 Oct 202618:35
–circl
cnnvd
CNNVD
Ammonia HTML Sanitizer – Ammonia Cross-Site Script Vulnerability
14 Oct 202616:00
–cnnvd
cve
CVE
CVE-2026-63430
15 Oct 202618:10
–cve
cvelist
Cvelist
CVE-2026-63430 ammonia: mXSS in ammonia via MathML `annotation-xml` encoding strip
15 Oct 202618:10
–cvelist
debiancve
Debian CVE
CVE-2026-63430
15 Oct 202618:10
–debiancve
euvd
EUVD
EUVD-2026-102241
22 Oct 202614:06
–euvd
nessus
Tenable Nessus
Fedora 46 : python-nh3 / rust-ammonia (2026-938b1c0296)
22 Oct 202600:00
–nessus
nessus
Tenable Nessus
Linux Distros Unpatched Vulnerability : CVE-2026-63430
16 Oct 202600:00
–nessus
mend
Mend
CVE-2026-63430
17 Jul 202609:26
–mend
nvd
NVD
CVE-2026-63430
15 Oct 202619:17
–nvd
Rows per page
Vulners
Node
OR
ammonia_projectammoniaRange4.1.0–4.1.3rust
ammonia_projectammoniaRange4.0.0–4.0.2rust
ammonia_projectammoniaRange<3.3.2rust

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

22 Oct 2026 14:06Current
6.2Medium risk
Vulners AI Score6.2
CVSS 46.3
EPSS0.00554
SSVC
4