Pdf.js Viewer Project vulnerabilities
We track 1 vulnerability in Pdf.js Viewer Project products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on May 7, 2024.
1vulnerabilities
0critical
1high
0exploited
7.1average CVSS score
Latest Pdf.js Viewer Project vulnerabilities
- 7.1 High severity
react-pdf: Improper Neutralization of Input During Web Page Generation
react-pdf displays PDFs in React apps. If PDF.js is used to load a malicious PDF, and PDF.js is configured with `isEvalSupported` set to `true` (which is the default value), unrestricted attacker-controlled JavaScript will be executed in the context of the hos