Pdfkit Project

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Pdfkit Project records in CISA KEV

No Pdfkit Project vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

2 records

TI-2022-09338 CVE-2022-25765 · GHSA-rhwx-hjx2-x4qr

HIGH 70

The package pdfkit from 0.0.0 are vulnerable to Command Injection where the URL is not properly sanitized.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.42503 Published 2022-09-09 Fixed in 0.8.7.2 CWE-77

TI-2013-01414 CVE-2013-1607 · GHSA-39v7-xpq4-8884

MEDIUM 47

Ruby PDFKit gem prior to 0.5.3 has a Code Execution Vulnerability

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02675 Published 2020-02-11 Fixed in 0.5.3 CWE-20