Mwilliamson vulnerabilities
We track 2 vulnerabilities in Mwilliamson products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on October 4, 2026.
2vulnerabilities
0critical
2high
0exploited
8.0average CVSS score
Latest Mwilliamson vulnerabilities
- 7.5 High severity
mammoth.js: Inefficient Regular Expression Complexity
Mammoth.js 1.3.0 before 1.12.3 contains a regular expression denial of service vulnerability in the style map tokeniser in lib/styles/parser/tokeniser.js due to overlapping regex alternatives. Attackers can supply a crafted .docx with an unterminated quoted st
- 8.4 High severity
mammoth.js: Improperly Controlled Modification of Object Prototype Attributes
mammoth (aka mammoth.js) before 1.12.2 is vulnerable to prototype pollution when reading the styles defined in a document. Converting a crafted .docx file allows an attacker to add arbitrary properties to Object.prototype. In 1.11.0 through 1.12.1, application