Tag

mammoth-npm

Safeguard articles tagged "mammoth-npm" — guides, analysis, and best practices for software supply chain and application security.

1 article

Open Source

Is the mammoth npm Package Safe? A DOCX Converter Security Review

The mammoth npm package converts .docx files to HTML, but CVE-2025-11849 showed how a crafted document can read files off your server. Here is what to check.

Dec 3, 20256 min read