CVE-2026-97151 | mwilliamson mammoth.js up to 1.12.1 Document Style Processing externalFileAccess prototype pollution

September 24, 2026 Yanac

A vulnerability classified as critical has been found in mwilliamson mammoth.js up to 1.12.1. This impacts an unknown function of the component Document Style Processing. Performing a manipulation of the argument externalFileAccess results in improperly controlled modification of object prototype attributes.

This vulnerability is known as CVE-2026-97151. Remote exploitation of the attack is possible. No exploit is available.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More