The @pdfme/common package from version 5.5.10 up to but not including 6.2.6 contains a server‑side request forgery flaw that allows an attacker to supply URLs that bypass the isUrlSafeToFetch denylist in the getB64BasePdf function. By using IPv4‑mapped IPv6, ::, NAT64 or localhost hostnames, the server can fetch loopback, internal or cloud‑metadata endpoints and embed the resulting data into generated PDF documents, potentially exposing sensitive configuration or internal network information.

The vulnerable component is the npm package @pdfme/common, version 5.5.10 through 6.2.5 inclusive. The flaw originates in the pdfme/pdfme repository on GitHub. Versions 6.2.6 and later contain the fix, and no other packages or versions are reported to be impacted.

The CVSS score of 8.9 classifies this as high severity. The EPSS score is not available, so current exploitation probability is unknown, and the vulnerability is not listed in the CISA KEV catalog. The SSRF vulnerability permits outbound HTTP requests from the server to attacker‑controlled destinations, including internal and cloud metadata endpoints, if a client submits specially formatted URLs. Successful exploitation could lead to disclosure of internal data, exposure of cloud identity tokens, or other sensitive information through a remote attacker supplying the basePdf URL.