{"action":"Upgrade ammonia to 3.3.3 or later.","affected":[{"fixed":"3.3.3","introduced":"0"},{"fixed":"4.0.3","introduced":"4.0.0"},{"fixed":"4.1.4","introduced":"4.1.2"}],"component":"ammonia","cve_ids":["CVE-2026-102342"],"ecosystem":"crates.io","epss":0.00272,"exploited":false,"fixed_versions":["3.3.3","4.0.3","4.1.4"],"ghsa_id":"GHSA-m6mh-2hw2-555x","id":"tcs_01M5KF1H3KRZ9E7C6R5855PE1J","modified_at":"2026-09-29T23:25:44.070111673Z","published_at":"2026-09-29T23:09:16Z","references":["https://osv.dev/vulnerability/GHSA-m6mh-2hw2-555x","https://github.com/rust-ammonia/ammonia/security/advisories/GHSA-m6mh-2hw2-555x","https://github.com/rust-ammonia/ammonia/pull/250","https://github.com/rust-ammonia/ammonia/pull/251","https://github.com/rust-ammonia/ammonia/pull/252","https://github.com/rust-ammonia/ammonia/commit/9394bd81179e756cb911314deabd943f1a9c8989","https://github.com/rust-ammonia/ammonia/commit/9e3335e2dd8ab07346ff7997f20662a3da4023f6","https://github.com/rust-ammonia/ammonia/commit/d2ae1547f478bd84d158bc5e57f5d31437dc4d8d","https://github.com/rust-ammonia/ammonia","https://rustsec.org/advisories/RUSTSEC-2026-0213.html"],"severity":{"label":"medium","score":5.4},"sources":[{"source":"osv","source_id":"GHSA-m6mh-2hw2-555x","url":"https://osv.dev/vulnerability/GHSA-m6mh-2hw2-555x"}],"summary":"Ammonia: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')"}