75 matches found
marked-sanitizer (0.0.0) potentially affected by CVE-2026-102342 via ammonia (3.1.4)
ammonia CARGO version 3.1.4 is affected by a known vulnerability. The following packages have a transitive dependency on ammonia and may be impacted: - marked-sanitizer 0.0.0 Source cves: CVE-2026-102342 Source advisory: OSV:GHSA-M6MH-2HW2-555X...
Ammonia: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The following SVG will produce a link with a javascript scheme. If the user clicks this link, they will run it. svg Click set Impact Allows stored XSS in applications that allow the animate and set tags. Patches Fixed in 3.3.3, 4.0.3, and 4.1.4 Workarounds Do not enable the animate or set tags...
GHSA-M6MH-2HW2-555X Ammonia: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The following SVG will produce a link with a javascript scheme. If the user clicks this link, they will run it. svg Click set Impact Allows stored XSS in applications that allow the animate and set tags. Patches Fixed in 3.3.3, 4.0.3, and 4.1.4 Workarounds Do not enable the animate or set tags...
[SECURITY] Fedora 43 Update: rust-ammonia-4.1.4-1.fc43
HTML Sanitization...
[SECURITY] Fedora 43 Update: python-nh3-0.2.21-9.fc43
Python binding to Ammonia HTML sanitizer Rust crate...
Fedora 43 : python-nh3 / rust-ammonia (2026-9324385c43)
The remote Fedora 43 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2026-9324385c43 advisory. - Update the ammonia crate to version 4.1.4. - Rebuild nh3 to apply fixes for RUSTSEC-2026-0193 and RUSTSEC-2026-0213. Tenable has extracted the preceding...
[SECURITY] Fedora 44 Update: rust-ammonia-4.1.4-1.fc44
HTML Sanitization...
[SECURITY] Fedora 44 Update: python-nh3-0.3.6-4.fc44
Python binding to Ammonia HTML sanitizer Rust crate...
Fedora 44 : python-nh3 / rust-ammonia (2026-61f0d68398)
The remote Fedora 44 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2026-61f0d68398 advisory. - Update the ammonia crate to version 4.1.4. - Rebuild nh3 to apply fixes for RUSTSEC-2026-0193 and RUSTSEC-2026-0213. Tenable has extracted the preceding...
Fedora 45 : python-nh3 / rust-ammonia (2026-48677bc7ac)
The remote Fedora 45 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2026-48677bc7ac advisory. - Update the ammonia crate to version 4.1.4. - Rebuild nh3 to apply fixes for RUSTSEC-2026-0193 and RUSTSEC-2026-0213. Tenable has extracted the preceding...
marked-sanitizer (0.0.0) potentially affected by CVE-2026-102342 via ammonia (3.1.4)
ammonia CARGO version 3.1.4 is affected by a known vulnerability. The following packages have a transitive dependency on ammonia and may be impacted: - marked-sanitizer 0.0.0 Source cves: CVE-2026-102342 Source advisory: OSV:RUSTSEC-2026-0213...
RUSTSEC-2026-0213 XSS in ammonia via SVG `animate` and `set` animation tags
The following SVG will produce a link with a javascript scheme. If the user clicks this link, they will run it. xml Click set Ammonia did not apply attribute filters based on attributeName, so the contents of the to, from, and values tags were not sanitized as URLs. Applications that do not...
PT-2026-102975
Name of the Vulnerable Software and Affected Versions Ammonia versions prior to 3.3.3 Ammonia versions prior to 4.0.3 Ammonia versions prior to 4.1.4 Description Ammonia fails to apply attribute filters based on the attributeName variable, which allows the contents of the to, from, and values tag...
[SECURITY] Fedora 44 Update: python-nh3-0.3.6-1.fc44
Python binding to Ammonia HTML sanitizer Rust crate...
marked-sanitizer (0.0.0) potentially affected by CVE-2026-63430 via ammonia (3.1.4)
ammonia CARGO version 3.1.4 is affected by a known vulnerability. The following packages have a transitive dependency on ammonia and may be impacted: - marked-sanitizer 0.0.0 Source cves: CVE-2026-63430 Source advisory: OSV:RUSTSEC-2026-0193...
mXSS in ammonia via MathML `annotation-xml` encoding strip
If a certain set of MathML tags are enabled, an attacker can inject arbitrary JavaScript code into the user's browser. The annotation-xml tag has slightly different behavior than the other "integration point" tags in MathML and SVG, but ammonia didn't handle it, so it didn't correctly strip the...
RUSTSEC-2026-0193 mXSS in ammonia via MathML `annotation-xml` encoding strip
If a certain set of MathML tags are enabled, an attacker can inject arbitrary JavaScript code into the user's browser. The annotation-xml tag has slightly different behavior than the other "integration point" tags in MathML and SVG, but ammonia didn't handle it, so it didn't correctly strip the...
PT-2026-60733
If a certain set of MathML tags are enabled, an attacker can inject arbitrary JavaScript code into the user's browser. The annotation-xml tag has slightly different behavior than the other "integration point" tags in MathML and SVG, but ammonia didn't handle it, so it didn't correctly strip the...
Fedora: Security Advisory (FEDORA-2025-074aba6ad4)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
