Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Vendor: Pdf-image Project Clear all filters
TI-2020-06550 CVE-2020-8132 · GHSA-rv7p-mmwq-x674

Code injection in pdf-image

Priority MEDIUM 46

Lack of input validation in pdf-image npm package version <= 2.0.0 may allow an attacker to run arbitrary code if PDF file path is constructed based on untrusted user input.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02045 Published 2020-02-28 No fix listed CWE-94