tocsin

crates.io/ammonia: unknown

Incorrect handling of embedded SVG and MathML leads to mutation XSS after removal

Action: Upgrade ammonia to 3.3.1 or later.

cargo update -p ammonia --precise 3.3.1
cargo update -p ammonia --precise 4.0.1
cargo update -p ammonia --precise 4.1.2

Affected

introducedfixedlast affected
0.0.0-03.3.1-
4.0.04.0.1-
4.1.04.1.2-

Fixed versions

3.3.14.0.14.1.2

Sources

published · modified · JSON