mwilliamson
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| mammoth.js | 2 | – | Oct 4, 2026 |
Exploited and recent CVEs
- CVE-2026-105219 Mammoth.js 1.3.0 before 1.12.3 ReDoS via Style Map Tokeniser 0.4%
- CVE-2026-97151 mammoth (aka mammoth.js) before 1.12.2 is vulnerable to prototype pollution when reading the styles defined in a document. Converting a crafted .docx file allows an attacker to add arbitrary propertie 0.4%