Read the docs

MITHALDU

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

MITHALDU records in CISA KEV

No MITHALDU vulnerabilities are listed in CISA KEV.

Records

2 records

TI-2026-14324 CVE-2026-17431 · GHSA-56v3-4wcg-g28h

OS command injection in MITHALDU PDF::WebKit

Priority LOW 29

PDF::WebKit versions through 1.2 for Perl allow OS command injection via a 2-arg open() of the output path in to_pdf and of stylesheet paths in _style_tag_for.

CVSS 3.1MEDIUM 6.1 Local No auth User interaction EPSS 0.00947 Published 2026-08-12 No fix listed CWE-73
Open these records in search →