CVE-2026-63430Published
ammonia is a Rust library for repairing and securing untrusted HTML. Prior to 3.3.2, 4.0.2, and 4.1.3, applications that explicitly allow the math tag, annotation-xml, and at least one raw-text HTML element while disallowing the encoding at…
Exact source revision recorded 25 Oct 2026 15:18:45 UTC. It does not establish the source's current position. Latest evidence.
Explicit identifiers and source references
These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.
CVE-2026-63430 · Microsoft / collected KEV context
nvd · CVE-2026-63430
- https://github.com/rust-ammonia/ammonia/commit/004bf2cee4288f74a6ee619d589e3e90c24c09ca
- https://github.com/rust-ammonia/ammonia/commit/7ac3fd3145236f28857eeecbadb544c8659cba31
- https://github.com/rust-ammonia/ammonia/commit/b51bf4f9749ed3cd518330105f20a2c39c9ee274
- https://github.com/rust-ammonia/ammonia/pull/243
- https://github.com/rust-ammonia/ammonia/pull/244
- https://github.com/rust-ammonia/ammonia/pull/245
- https://github.com/rust-ammonia/ammonia/releases/tag/v3.3.2
- https://github.com/rust-ammonia/ammonia/releases/tag/v4.0.2
- https://github.com/rust-ammonia/ammonia/releases/tag/v4.1.3
- https://github.com/rust-ammonia/ammonia/security/advisories/GHSA-9jh8-v38h-cvhr
- https://ivan09999.github.io/ammonia-mxss
- https://rustsec.org/advisories/RUSTSEC-2026-0193.html
Current operational correlations are not mixed into this historical source record. Open latest evidence to discover current connections.