Rust advisories / crate
Security history · ammonia · data from Oct 24, 2026
Is ammonia safe to use? Its security history
VerdictNo open advisories. 9 past vulnerabilities were fixed; use 4.2.4 or newer to be clear of all of them.
9advisories on record
9vulnerabilities
0unmaintained notices
4.2.4newest fixed version
Every advisory, newest first
- VulnerabilityRUSTSEC-2026-0373 · 2026-10-16Missing case-insensitive matching for CSS url function
- VulnerabilityRUSTSEC-2026-0213 · 2026-07-21XSS in ammonia via SVG `animate` and `set` animation tags
- VulnerabilityRUSTSEC-2026-0193 · 2026-06-30mXSS in ammonia via MathML `annotation-xml` encoding strip
- VulnerabilityRUSTSEC-2025-0071 · 2025-09-21Incorrect handling of embedded SVG and MathML leads to mutation XSS after removal
- VulnerabilityRUSTSEC-2022-0003 · 2022-01-19Space bug in `clean_text`
- VulnerabilityRUSTSEC-2021-0157 · 2021-10-10Incorrect escaping for `url("")` functions in CSS style attributes
- VulnerabilityRUSTSEC-2021-0158 · 2021-10-10XSS in ammonia via SVG `animateMotion`, `animateTransform`, and/or `animateColor` tags
- VulnerabilityRUSTSEC-2021-0074 · 2021-07-08Incorrect handling of embedded SVG and MathML leads to mutation XSS
- Vulnerability HighRUSTSEC-2019-0001 · 2019-04-27Uncontrolled recursion leads to abort in HTML serialization
Check your version
Run cargo tree -i ammonia to see which version you build and why, or paste your Cargo.lock into the Cargo.toml checker to match every advisory against your exact versions.
RustSec advisories (CC0-1.0) and GitHub-reviewed advisories via OSV's crates.io export, downloaded Oct 24, 2026.
Up next
Are you affected?Check your whole dependency treeRead it next →Also worth your time
Did this answer your question?