Pandoc

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Pandoc records in CISA KEV

No Pandoc vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Pandoc 2 records LOW

Records

2 records in Pandoc · all components

TI-2023-20085 CVE-2023-38745 · GHSA-9hpj-m9v9-5wvw

Pandoc before 3.1.6 allows arbitrary file write: this can be triggered by providing a…

LOW 30

Pandoc before 3.1.6 allows arbitrary file write: this can be triggered by providing a crafted image element in the input when generating files via the --extract-media option or outputting to PDF format.

CVSS 3.1MEDIUM 6.3 Local No auth User interaction EPSS 0.00252 Published 2023-07-25 Will not fix

TI-2023-17997 CVE-2023-35936

Arbitrary file write is possible in Pandoc when using PDF output or --extract-media with untrusted input

LOW 27

Pandoc is a Haskell library for converting from one markup format to another, and a command-line tool that uses this library.

CVSS 3.1MEDIUM 6.0 Local Low privileges User interaction EPSS 0.00368 Published 2023-07-05 Partial fix · 3.1.4 CWE-20

Open these records in search →

Critical	0
High	0
Medium	2
Low	0
No CVSS	0