Html-pdf Project

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Html-pdf Project records in CISA KEV

No Html-pdf Project vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

1 record in Html-pdf · all components

TI-2019-11306 CVE-2019-15138 · GHSA-x4w5-r546-x9qh

LOW 36

The html-pdf package 2.2.0 for Node.js has an arbitrary file read vulnerability via an HTML file that uses XMLHttpRequest to access a file:/// URL.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01832 Published 2019-09-20 Fixed in 3.0.1 CWE-668