Filtered by vendor Pdf-image Project Subscriptions
Filtered by product Pdf-image Subscriptions
Total 2 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2018-3757 1 Pdf-image Project 1 Pdf-image 2024-09-16 9.8 Critical
Command injection exists in pdf-image v2.0.0 due to an unescaped string parameter.
CVE-2020-8132 1 Pdf-image Project 1 Pdf-image 2024-08-04 9.8 Critical
Lack of input validation in pdf-image npm package version <= 2.0.0 may allow an attacker to run arbitrary code if PDF file path is constructed based on untrusted user input.