Skip to content
OpenAdvisories

Vendor

mwilliamson

2 known vulnerabilities.

Products

mammoth.js 2
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.5
    CVE-2026-105219

    Mammoth.js 1.3.0 before 1.12.3 ReDoS via Style Map Tokeniser

    Mammoth.js 1.3.0 before 1.12.3 contains a regular expression denial of service vulnerability in the style map tokeniser in lib/styles/parser/tokeniser.js due to overlapping regex alternatives. Attackers can supply a crafted .docx with an unterminated quoted s…

    mwilliamson mammoth.js
  • High 8.4
    CVE-2026-97151

    mammoth (aka mammoth.js) before 1.12.2 is vulnerable to prototype pollution when reading the styles defined in a docume…

    mwilliamson mammoth.js