CyberSecBulletin

Pdf-image Project vulnerabilities

We track 1 vulnerability in Pdf-image Project products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on March 25, 2026.

1vulnerabilities
1critical
0high
0exploited
9.8average CVSS score

Latest Pdf-image Project vulnerabilities

  • 9.8 Critical severity

    Pdf-image: Improper Control of Generation of Code

    CVE-2026-26830Pdf-image ProjectEPSS 2.56%

    pdf-image (npm package) through version 2.0.0 allows OS command injection via the pdfFilePath parameter. The constructGetInfoCommand and constructConvertCommandForPage functions use util.format() to interpolate user-controlled file paths into shell command str