mammoth
npm
SEMVER · introduced 0.3.25 → fixed 1.11.0
GHSA-rmjr-87wv-gf87Published
Mammoth is vulnerable to Directory Traversal
Exact source revision recorded 23 Oct 2026 16:01:25 UTC. It does not establish the source's current position. Latest evidence.
osv · GHSA-rmjr-87wv-gf87
Publishedorg.zwobble.mammoth:mammoth
Maven
ECOSYSTEM · introduced 0 → fixed 1.11.0
14 explicitly affected versions
0.0.1, 0.0.2, 0.0.3, 0.0.4, 1.10.0, 1.3.0, 1.3.1, 1.4.0, 1.4.1, 1.4.2, 1.5.0, 1.7.0, 1.8.0, 1.9.0
mammoth
PyPI
ECOSYSTEM · introduced 0.3.25 → fixed 1.11.0
51 explicitly affected versions
0.3.25, 0.3.26, 0.3.27, 0.3.29, 0.3.30, 0.3.31, 1.0.0, 1.0.1, 1.0.2, 1.0.3, 1.0.4, 1.1.0, 1.1.1, 1.10.0, 1.2.0, 1.2.1, 1.2.2, 1.3.0, 1.3.1, 1.3.2, 1.3.3, 1.3.4, 1.3.5, 1.4.0, 1.4.1, 1.4.10, 1.4.11, 1.4.12, 1.4.13, 1.4.14, 1.4.15, 1.4.16, 1.4.17, 1.4.18, 1.4.19, 1.4.2, 1.4.3, 1.4.4, 1.4.5, 1.4.6, 1.4.7, 1.4.8, 1.4.9, 1.5.0, 1.5.1, 1.6.0, 1.7.0, 1.7.1, 1.8.0, 1.9.0, 1.9.1
Mammoth
NuGet
ECOSYSTEM · introduced 0 → fixed 1.11.0
6 explicitly affected versions
0.0.1, 0.0.2, 1.3.1, 1.3.2, 1.4.0, 1.8.0
Original source record · Cite this exact observation · Complete original publisher JSON