CyberSecBulletin

Pdfmake vulnerabilities

We track 2 vulnerabilities in Pdfmake products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on March 10, 2026.

2vulnerabilities
0critical
2high
0exploited
7.5average CVSS score

Latest Pdfmake vulnerabilities

  • 7.5 High severity

    Pdfmake: Server-Side Request Forgery

    CVE-2026-26801Pdfmake

    Server-Side Request Forgery (SSRF) vulnerability in pdfmake versions 0.3.0-beta.2 through 0.3.5 allows a remote attacker to obtain sensitive information via the src/URLResolver.js component. The fix was released in version 0.3.6 which introduces the setUrlAcce

  • 7.5 High severity

    pdfmake: Allocation of Resources Without Limits or Throttling

    CVE-2025-11362Pdfmake

    Versions of the package pdfmake from 0.3.0-beta.1 and before 0.3.0-beta.17 are vulnerable to Allocation of Resources Without Limits or Throttling via repeatedly redirect URL in file embedding. An attacker can cause the application to crash or become unresponsi