Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: pdfme schemas 5.5.9 Clear all filters
TI-2026-57172 CVE-2026-82868 · GHSA-9f44-gwhq-mr2g

@pdfme/schemas before 5.5.9 Cross-Site Scripting via SVG

Priority MEDIUM 57

@pdfme/schemas before 5.5.9 contains a cross-site scripting vulnerability in the SVG schema plugin that renders user-supplied SVG content directly to innerHTML without sanitization.

CVSS 4.0MEDIUM 5.3 Network No auth User interaction EPSS 0.00263 Published 2026-08-31 Fixed in 5.5.9 CWE-79
TI-2026-57171 CVE-2026-82867 · GHSA-q78q-xrxw-xgx6

@pdfme/schemas before 5.5.9 Cross-Site Scripting via Select

Priority MEDIUM 57

@pdfme/schemas before 5.5.9 contains a cross-site scripting vulnerability in the Select schema plugin that fails to sanitize option values before interpolating them into HTML via innerHTML.

CVSS 4.0MEDIUM 5.3 Network No auth User interaction EPSS 0.0031 Published 2026-08-31 Fixed in 5.5.9 CWE-79