{"action":"Upgrade ammonia to 3.3.2 or later.","affected":[{"fixed":"3.3.2","introduced":"0"},{"fixed":"4.0.2","introduced":"4.0.0"},{"fixed":"4.1.3","introduced":"4.1.0"}],"component":"ammonia","cve_ids":["CVE-2026-63430"],"ecosystem":"crates.io","exploited":false,"fixed_versions":["3.3.2","4.0.2","4.1.3"],"ghsa_id":"GHSA-9jh8-v38h-cvhr","id":"tcs_01M5JMC4GQC02XKFVHM2FF6TR8","modified_at":"2026-10-22T14:16:23.103650626Z","published_at":"2026-10-22T14:06:10Z","references":["https://osv.dev/vulnerability/GHSA-9jh8-v38h-cvhr","https://github.com/rust-ammonia/ammonia/security/advisories/GHSA-9jh8-v38h-cvhr","https://nvd.nist.gov/vuln/detail/CVE-2026-63430","https://github.com/rust-ammonia/ammonia/pull/243","https://github.com/rust-ammonia/ammonia/pull/244","https://github.com/rust-ammonia/ammonia/pull/245","https://github.com/rust-ammonia/ammonia/commit/004bf2cee4288f74a6ee619d589e3e90c24c09ca","https://github.com/rust-ammonia/ammonia/commit/7ac3fd3145236f28857eeecbadb544c8659cba31","https://github.com/rust-ammonia/ammonia/commit/b51bf4f9749ed3cd518330105f20a2c39c9ee274","https://github.com/rust-ammonia/ammonia","https://github.com/rust-ammonia/ammonia/releases/tag/v3.3.2","https://github.com/rust-ammonia/ammonia/releases/tag/v4.0.2","https://github.com/rust-ammonia/ammonia/releases/tag/v4.1.3","https://ivan09999.github.io/ammonia-mxss","https://rustsec.org/advisories/RUSTSEC-2026-0193.html"],"severity":{"label":"medium","score":6.3},"sources":[{"source":"osv","source_id":"GHSA-9jh8-v38h-cvhr","url":"https://osv.dev/vulnerability/GHSA-9jh8-v38h-cvhr"},{"source":"nvd","source_id":"CVE-2026-63430","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-63430"}],"summary":"ammonia: mXSS via MathML `annotation-xml` encoding strip"}