tocsin

crates.io/ammonia CVE-2026-63430: medium 6.3

ammonia: mXSS via MathML `annotation-xml` encoding strip

Action: Upgrade ammonia to 3.3.2 or later.

cargo update -p ammonia --precise 3.3.2
cargo update -p ammonia --precise 4.0.2
cargo update -p ammonia --precise 4.1.3

Affected

introducedfixedlast affected
03.3.2-
4.0.04.0.2-
4.1.04.1.3-

Fixed versions

3.3.24.0.24.1.3

Sources

CVE-2026-63430 · published · modified · JSON