Read the docs

mwilliamson

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

mwilliamson records in CISA KEV

No mwilliamson vulnerabilities are listed in CISA KEV.

Records

2 records

TI-2026-67557 CVE-2026-105219 · GHSA-fp33-4hh4-xjj5

Mammoth.js 1.3.0 before 1.12.3 ReDoS via Style Map Tokeniser

Priority MEDIUM 44

Mammoth.js 1.3.0 before 1.12.3 contains a regular expression denial of service vulnerability in the style map tokeniser in lib/styles/parser/tokeniser.js due to overlapping regex alternatives.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00358 Published 2026-10-04 Fixed in 1.12.3 CWE-1333
TI-2026-63949 CVE-2026-97151 · GHSA-89qm-22qm-xf5h

Prototype pollution in mwilliamson mammoth.js

Priority LOW 36

mammoth (aka mammoth.js) before 1.12.2 is vulnerable to prototype pollution when reading the styles defined in a document.

CVSS 4.0HIGH 8.4 Network No auth No interaction EPSS 0.00355 Published 2026-09-24 Fixed in 1.12.2 CWE-1321
Open these records in search →