Markdown To Pdf Project

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Markdown To Pdf Project records in CISA KEV

No Markdown To Pdf Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Markdown To Pdf 1 record MEDIUM

Records

1 record in Markdown To Pdf · all components

TI-2021-06174 CVE-2021-23639 · GHSA-x949-7cm6-fm6p

Remote code execution (RCE) in md-to-pdf

MEDIUM 50

The package md-to-pdf before 5.0.0 are vulnerable to Remote Code Execution (RCE) due to utilizing the library gray-matter to parse front matter content, without disabling the JS engine.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.05413 Published 2021-12-10 Fixed in 5.0.0 CWE-94

Open these records in search →

Critical	1
High	0
Medium	0
Low	0
No CVSS	0