VYPR

npm package

pdfinfojs

pkg:npm/pdfinfojs

Vulnerabilities (1)

  • CVE-2018-3746Jun 1, 2018
    affected < 0.4.1fixed 0.4.1

    The pdfinfojs NPM module versions <= 0.3.6 has a command injection vulnerability that allows an attacker to execute arbitrary commands on the victim's machine.