Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2026-105219— Mammoth.js 1.3.0 before 1.12.3 ReDoS via Style Map Tokeniser

Quick assessment

Affected
mwilliamson mammoth.js
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Mammoth.js 1.3.0 至 1.12.3（不含 1.12.3）版本中存在一个正则表达式拒绝服务（ReDoS）漏洞。该漏洞位于 lib/styles/parser/tokeniser.js 文件中的样式映射标记器（style map tokeniser）里，原因是存在重叠的正则表达式替代分支。攻击者可以构造一个包含未终止的、由重复反斜杠转义序列组成的引号内字符串的 .docx 文件，并通过 mammoth/style-map 机制触发该漏洞，从而导致 Node.js 事件循环被阻塞。

CVSS 7.5 · High

Possible ATT&CK Techniques 1 AI

T1496 · Resource Hijacking

Affected Version Matrix 1

VendorProduct Version RangeStatus
mwilliamson mammoth.js 1.3.0< 1.12.3 affected
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-105219

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
Mammoth.js 1.3.0 before 1.12.3 ReDoS via Style Map Tokeniser
Source: CVE Program / CVE List V5
Vulnerability Description
Mammoth.js 1.3.0 before 1.12.3 contains a regular expression denial of service vulnerability in the style map tokeniser in lib/styles/parser/tokeniser.js due to overlapping regex alternatives. Attackers can supply a crafted .docx with an unterminated quoted string of repeated backslash escapes in mammoth/style-map to block the Node.js event loop.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
CWE-1333
Source: CVE Program / CVE List V5

Affected Products

Vendor Product Affected Versions CPE Subscribe
mwilliamson mammoth.js 1.3.0 ~ 1.12.3 -

II. Public POCs for CVE-2026-105219

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-105219

请登录查看更多情报信息。

Patches & Fixes for CVE-2026-105219 (2)

Vendor Advisories for CVE-2026-105219 (1)

Exploits & Public PoCs for CVE-2026-105219 (1)

IV. Related Vulnerabilities

Same product: mammoth.js
Same vendor: mwilliamson
Same weakness: CWE-1333

V. Comments for CVE-2026-105219

No comments yet

Leave a comment