md-to-pdf vulnerabilities

1 known vulnerability in md-to-pdf from Simonhaenisch. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 10.0 Critical severity

  md-to-pdf: Improper Control of Generation of Code

  CVE-2025-65108Nov 21, 2025Simonhaenisch

  md-to-pdf is a CLI tool for converting Markdown files to PDF using Node.js and headless Chrome. Prior to version 5.2.5, a Markdown front-matter block that contains JavaScript delimiter causes the JS engine in gray-matter library to execute arbitrary code in th