RubyGems package
pdfkit
pkg:gem/pdfkit
Vulnerabilities (2)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2022-25765 | Hig | 7.3 | < 0.8.7.2 | 0.8.7.2 | Sep 9, 2022 | The package pdfkit from 0.0.0 are vulnerable to Command Injection where the URL is not properly sanitized. | |
| CVE-2013-1607 | Cri | 9.8 | < 0.5.3 | 0.5.3 | Feb 11, 2020 | Ruby PDFKit gem prior to 0.5.3 has a Code Execution Vulnerability |
- affected < 0.8.7.2fixed 0.8.7.2
The package pdfkit from 0.0.0 are vulnerable to Command Injection where the URL is not properly sanitized.
- affected < 0.5.3fixed 0.5.3
Ruby PDFKit gem prior to 0.5.3 has a Code Execution Vulnerability