electron-pdf vulnerabilities
1 known vulnerability in electron-pdf from Fraserxu. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
1vulnerabilities
0critical
1high
0exploited
7.5average CVSS score
Latest first
- 7.5 High severity
electron-pdf: Improper Neutralization of Input During Web Page Generation
electron-pdf version 20.0.0 allows an external attacker to remotely obtain arbitrary local files. This is possible because the application does not validate the HTML content entered by the user.