{"action":"Upgrade ammonia to 3.3.1 or later.","affected":[{"fixed":"3.3.1","introduced":"0.0.0-0"},{"fixed":"4.0.1","introduced":"4.0.0"},{"fixed":"4.1.2","introduced":"4.1.0"}],"component":"ammonia","cve_ids":[],"ecosystem":"crates.io","exploited":false,"fixed_versions":["3.3.1","4.0.1","4.1.2"],"ghsa_id":"GHSA-mm7x-qfjj-5g2c","id":"tcs_01M5KFA4SF8231M7VB5HK4A8TX","modified_at":"2025-10-28T06:29:25.438486Z","published_at":"2025-09-21T12:00:00Z","references":["https://osv.dev/vulnerability/RUSTSEC-2025-0071","https://crates.io/crates/ammonia","https://rustsec.org/advisories/RUSTSEC-2025-0071.html"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"RUSTSEC-2025-0071","url":"https://osv.dev/vulnerability/RUSTSEC-2025-0071"}],"summary":"Incorrect handling of embedded SVG and MathML leads to mutation XSS after removal"}