[Git][security-tracker-team/security-tracker][master] new rust-ammonia issue

[Moritz Muehlenhoff (@jmm)]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
e34edb02 by Moritz Muehlenhoff at 2026-10-15T21:50:00+02:00
new rust-ammonia issue

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -115,7 +115,10 @@ CVE-2026-71490 (OPNsense is a FreeBSD based firewall and routing platform. Prior
 CVE-2026-63442 (OPNsense is a FreeBSD based firewall and routing platform. Prior to ve ...)
 	NOT-FOR-US: OPNsense
 CVE-2026-63430 (ammonia is a Rust library for repairing and securing untrusted HTML. P ...)
-	TODO: check
+	- rust-ammonia <unfixed>
+	NOTE: https://github.com/rust-ammonia/ammonia/security/advisories/GHSA-9jh8-v38h-cvhr
+	NOTE: https://github.com/rust-ammonia/ammonia/commit/7ac3fd3145236f28857eeecbadb544c8659cba31 (v4.0.2)
+	NOTE: https://github.com/rust-ammonia/ammonia/commit/b51bf4f9749ed3cd518330105f20a2c39c9ee274 (v4.1.3)
 CVE-2026-63315 (WebCTI service for Slican IPx telephone exchangesstorestemporary subsc ...)
 	NOT-FOR-US: WebCTI
 CVE-2026-63314 (WebCTI service for Slican IPx telephone exchangesis vulnerable to SQL  ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/e34edb02430e1d5d3b5554ba0c49b796852c40b8

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/e34edb02430e1d5d3b5554ba0c49b796852c40b8
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261015/2c4ee037/attachment.htm>