Nodepdf Project

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Nodepdf Project records in CISA KEV

No Nodepdf Project vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

1 record in Nodepdf · all components

TI-2016-04311 CVE-2016-4991 · GHSA-p7w2-cg47-7v79

MEDIUM 46

Input passed to the Pdf() function is shell escaped and passed to child_process.exec() during PDF rendering.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0184 Published 2022-07-28 No fix listed CWE-77