VYPR

npm package

html-pdf

pkg:npm/html-pdf

Vulnerabilities (1)

  • CVE-2019-15138Sep 20, 2019
    affected < 3.0.1fixed 3.0.1

    The html-pdf package 2.2.0 for Node.js has an arbitrary file read vulnerability via an HTML file that uses XMLHttpRequest to access a file:/// URL.