CyberSecBulletin

Mammoth vulnerabilities

We track 1 vulnerability in Mammoth products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on October 17, 2025.

1vulnerabilities
1critical
0high
0exploited
9.3average CVSS score

Latest Mammoth vulnerabilities

  • 9.3 Critical severity

    mammoth: Improper Limitation of a Pathname to a Restricted Directory

    CVE-2025-11849MammothEPSS 1.13%

    Versions of the package mammoth from 0.3.25 and before 1.11.0; versions of the package mammoth from 0.3.25 and before 1.11.0; versions of the package mammoth before 1.11.0; versions of the package org.zwobble.mammoth:mammoth before 1.11.0 are vulnerable to Dir