mwilliamson mammoth.js

• CVE-2026-105219 High 7.5 Mammoth.js 1.3.0 before 1.12.3 ReDoS via Style Map Tokeniser 0.4%
• CVE-2026-97151 High 8.4 mammoth (aka mammoth.js) before 1.12.2 is vulnerable to prototype pollution when reading the styles defined in a document. Converting a crafted .docx file allows an attacker to add arbitrary propertie 0.4%