← All advisories

Medium severity5.5NVD Advisory· Published Jul 20, 2018· Updated Jun 17, 2026

CVE-2018-3770

CVE-2018-3770

Description

A path traversal exists in markdown-pdf version <9.0.0 that allows a user to insert a malicious html code that can result in reading the local files.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
markdown-pdfnpm	< 9.0.0	9.0.0

Affected products

3

Markdown PDF Project/Markdown PDF
cpe:2.3:a:markdown-pdf_project:markdown-pdf:*:*:*:*:*:node.js:*:*
Range: <9.0.0
ghsa-coords
pkg:npm/markdown-pdf
Range: < 9.0.0
HackerOne/markdown-pdfv5
Range: 9.0.0

Patches

Vulnerability mechanics

References

4

hackerone.com/reports/360727nvdExploitThird Party AdvisoryWEB
github.com/advisories/GHSA-p7c9-jqhq-vr3vghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2018-3770ghsaADVISORY
www.npmjs.com/advisories/991ghsaWEB

News mentions

0

No linked articles in our index yet.