Alam00000 vulnerabilities
We track 2 vulnerabilities in Alam00000 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on September 24, 2026.
2vulnerabilities
0critical
2high
0exploited
7.8average CVSS score
Latest Alam00000 vulnerabilities
- 8.6 High severity
bentopdf: Server-Side Request Forgery
BentoPDF is a client-side PDF toolkit that is self hostable. In 2.8.6 and earlier, the certificate and timestamp CORS proxy in cloudflare/cors-proxy-worker.js uses isPrivateOrReservedHost() to validate a supplied hostname separately from the DNS resolution use
- 7.0 High severity
bentopdf: Improper Neutralization of Input During Web Page Generation
BentoPDF is a client-side PDF toolkit that is self hostable. Prior to version 2.8.3, a cross-site scripting vulnerability was identified in BentoPD. An attacker may be able to execute arbitrary JavaScript in certain circumstances in Markdown to PDF Tool. This