{"action":"Upgrade rust-ammonia to 3.1.2-1 or later.","affected":[{"fixed":"3.1.2-1","introduced":"0"}],"component":"rust-ammonia","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:14","exploited":false,"fixed_versions":["3.1.2-1"],"id":"tcs_01M5NFWPFA2EM5AXH9SN5BT3JX","modified_at":"2026-10-23T18:03:31.792713411Z","published_at":"2021-08-08T06:15:09.043Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2021-38193","https://security-tracker.debian.org/tracker/CVE-2021-38193"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2021-38193#Debian:14/rust-ammonia","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2021-38193"}],"summary":"An issue was discovered in the ammonia crate before 3.1.0 for Rust. XSS can occur because the parsing differences for HTML, SVG, and MathML are mishandled, a similar issue to CVE-2020-26870."}