ammonia vulnerabilities (crates.io)
9 vulnerabilities.
-
ammoniacrates.io Missing case-insensitive matching for CSS url function No score -
ammoniacrates.io ammonia allows stored XSS through unsanitized SVG animate and set attributes 5.4 Medium -
ammoniacrates.io ammonia: mXSS in ammonia via MathML `annotation-xml` encoding strip 6.3 Medium -
ammoniacrates.io Ammonia incorrectly handles embedded SVG and MathML leading to mutation XSS after removal 1.7 Low -
ammoniacrates.io Space bug in `clean_text` No score -
ammoniacrates.io XSS in ammonia via SVG `animateMotion`, `animateTransform`, and/or `animateColor` tags No score -
ammoniacrates.io Incorrect escaping for `url("")` functions in CSS style attributes No score -
ammoniacrates.io Cross-site Scripting in ammonia 6.1 Medium -
ammoniacrates.io Uncontrolled recursion in ammonia 7.5 High