Executive brief
mXSS in ammonia via MathML `annotation-xml` encoding strip
Affected products
- crates.io ammonia
Junglewise Threat Intelligence
CVE-2026-63430: RUSTSEC-2026-0193 - mXSS in ammonia via MathML `annotation-xml` encoding strip
CVE-2026-63430 · Severity: info · Published 2026-06-30
Technologies: ammonia (crates.io). Vendors: crates.io.
Related threats
- RUSTSEC-2026-0213 - XSS in ammonia via SVG `animate` and `set` animation tags
- RUSTSEC-2025-0071 - Incorrect handling of embedded SVG and MathML leads to mutation XSS after removal
- Space bug in `clean_text`
- RUSTSEC-2022-0003 - Space bug in `clean_text`
- RUSTSEC-2021-0074 - Incorrect handling of embedded SVG and MathML leads to mutation XSS