VYPR

Electron PDF

by Fraserxu

CVEs (1)

  • CVE-2024-1648HigFeb 20, 2024
    risk 0.49cvss 7.5epss 0.01

    electron-pdf version 20.0.0 allows an external attacker to remotely obtain arbitrary local files. This is possible because the application does not validate the HTML content entered by the user.