mwilliamson mammoth.js

2 known vulnerabilities in mwilliamson mammoth.js, with patch priority, exploit likelihood and the news covering them.

Latest vulnerabilities

  • CVE-2026-105219 CVSS 8.7 high Mammoth.js 1.3.0 before 1.12.3 contains a regular expression denial of service vulnerability in the style map tokeniser in…
  • CVE-2026-97151 CVSS 8.4 high mammoth (aka mammoth.js) before 1.12.2 is vulnerable to prototype pollution when reading the styles defined in a document. Converting a…