Search

CVE-2026-105219 - Mammoth.js 1.3.0 before 1.12.3 ReDoS via Style Map Tokeniser

CVE ID : CVE-2026-105219 Published : Oct. 4, 2026, 6:16 p. m. • 1 hour, 15 minutes ago Description : Mammoth. js 1. 3. 0 before 1. 12. 3 contains a regular expression denial of service vulnerability in the style map tokeniser in lib/styles/parser/tokeniser. js due to overlapping regex alternatives. Attackers can supply a crafted . docx with an unterminated quoted string of repeated backslash escapes in mammoth/style-map to block the Node. js event loop. Severity: 8.7 • HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...