What is GHSA-5hp8-35wj-m525?

GHSA-5hp8-35wj-m525 is a security advisory published by GitHub Security Advisories with High severity. Uncontrolled recursion in ammonia

Which CVE IDs does GHSA-5hp8-35wj-m525 cover?

GHSA-5hp8-35wj-m525 covers the following CVE IDs: CVE-2019-15542. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-5hp8-35wj-m525?

GHSA-5hp8-35wj-m525 has a CVSS v3 base score of 7.5, published by GitHub Security Advisories.

Which products are affected by GHSA-5hp8-35wj-m525?

GHSA-5hp8-35wj-m525 affects 1 product, including: rust/ammonia:\u003c 2.1.0.

GHSA-5hp8-35wj-m525HighCVSS 7.5

Uncontrolled recursion in ammonia

Vendor

GitHub Security Advisories

Published

August 25, 2021

Last Modified

January 11, 2023

🔗 CVE IDs covered (1)

CVE-2019-15542 →

📋 Description

An issue was discovered in the ammonia crate before 2.1.0 for Rust. There is uncontrolled recursion during HTML DOM tree serialization.

🎯 Affected products1

rust/ammonia:< 2.1.0

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2019-15542
https://github.com/rust-ammonia/ammonia/blob/master/CHANGELOG.md#210
https://rustsec.org/advisories/RUSTSEC-2019-0001.html
https://github.com/advisories/GHSA-5hp8-35wj-m525