Pdfmake

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

Pdfmake records in CISA KEV

No Pdfmake vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Pdfmake 3 records HIGH

Records

3 records

TI-2022-22805 CVE-2022-46161

Code injection in pdfmake

HIGH 82

pdfmake is an open source client/server side PDF printing in pure JavaScript.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.01729 Published 2022-12-06 No fix listed CWE-94

TI-2026-21390 CVE-2026-26801 · GHSA-wp52-r2fp-4vmr

Server-Side Request Forgery (SSRF) vulnerability in pdfmake versions 0.3.0-beta.2 through…

MEDIUM 40

Server-Side Request Forgery (SSRF) vulnerability in pdfmake versions 0.3.0-beta.2 through 0.3.5 allows a remote attacker to obtain sensitive information via the src/URLResolver.js component.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00546 Published 2026-03-10 Fixed in 0.3.6 CWE-918

TI-2025-10410 CVE-2025-11362 · GHSA-rj3r-r7hh-jxfq

Resource allocation without limits in pdfmake

LOW 38

Versions of the package pdfmake from 0.3.0-beta.1 and before 0.3.0-beta.17 are vulnerable to Allocation of Resources Without Limits or Throttling via repeatedly redirect URL in file embedding.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.0043 Published 2025-10-07 Fixed in 0.3.0-beta.17, 0.3.0-beta.18 CWE-770

Open these records in search →

Critical	1
High	2
Medium	0
Low	0
No CVSS	0