Skip to main content
← npm

pdfmake

2 known vulnerabilities (2 high), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
2 · 2 high
Weekly downloads
4.1M
Dependents
218
Registry
npm

Advisories 2

  • Server-Side Request Forgery (SSRF) vulnerability in pdfmake versions 0.3.0-beta.2 through 0.3.5 allows a remote attacker to obtain…

    Affected: from 0.3.0-beta.2, fixed in 0.3.6.

  • Versions of the package pdfmake from 0.3.0-beta.1 and before 0.3.0-beta.17 are vulnerable to Allocation of Resources Without Limits or…

    Affected: from 0.3.0-beta.1, fixed in 0.3.0-beta.17.