CyberSecBulletin

Pdfmake Project vulnerabilities

We track 1 vulnerability in Pdfmake Project products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on February 29, 2024.

1vulnerabilities
1critical
0high
0exploited
9.8average CVSS score

Latest Pdfmake Project vulnerabilities

  • 9.8 Critical severity

    pdfmake: Improper Control of Generation of Code

    CVE-2024-25180Pdfmake ProjectEPSS 1.02%

    An issue discovered in pdfmake 0.2.9 allows remote attackers to run arbitrary code via crafted POST request to the /pdf endpoint. NOTE: this is disputed because the behavior of the /pdf endpoint is intentional. The /pdf endpoint is only available after install