Filtered by vendor Pdfmake Project Subscriptions
Filtered by product Pdfmake Subscriptions
Total 3 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2025-11362 1 Pdfmake Project 1 Pdfmake 2025-10-09 7.5 High
Versions of the package pdfmake before 0.3.0-beta.17 are vulnerable to Allocation of Resources Without Limits or Throttling via repeatedly redirect URL in file embedding. An attacker can cause the application to crash or become unresponsive by providing crafted input that triggers this condition.
CVE-2024-25180 1 Pdfmake Project 1 Pdfmake 2025-05-13 9.8 Critical
An issue discovered in pdfmake 0.2.9 allows remote attackers to run arbitrary code via crafted POST request to the /pdf endpoint. NOTE: this is disputed because the behavior of the /pdf endpoint is intentional. The /pdf endpoint is only available after installing a test framework (that lives outside of the pdfmake applicaton). Anyone installing this is responsible for ensuring that it is only available to authorized testers.
CVE-2022-46161 1 Pdfmake Project 1 Pdfmake 2025-04-22 10 Critical
pdfmake is an open source client/server side PDF printing in pure JavaScript. In versions up to and including 0.2.5 pdfmake contains an unsafe evaluation of user controlled input. Users of pdfmake are thus subject to arbitrary code execution in the context of the process running the pdfmake code. There are no known fixes for this issue. Users are advised to restrict access to trusted user input.