https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-16T13:47:04.576851+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2018-00912 bdu:2018-00912 2026-10-16T13:47:04.580263+00:00 bdu:2018-00912 https://cve.radiocsirt.org/vuln/cnvd-2018-13380 cnvd-2018-13380 2026-10-16T13:47:04.580293+00:00 cnvd-2018-13380 https://cve.radiocsirt.org/vuln/euvd-2026-174671 EUVD-2026-174671 2026-10-16T13:47:04.580308+00:00 EUVD-2026-174671 https://cve.radiocsirt.org/vuln/fkie_cve-2018-3757 fkie_cve-2018-3757 2026-10-16T13:47:04.580319+00:00

Command injection exists in pdf-image v2.0.0 due to an unescaped string parameter.

 https://cve.radiocsirt.org/vuln/ghsa-5gwh-g79j-vh4q GHSA-5gwh-g79j-vh4q — Command Injection in pdf-image 2026-10-16T13:47:04.580343+00:00

Affected: npm: pdf-image

Versions of `pdf-image` before 2.0.0 are vulnerable to command injection. This vulnerability is exploitable if the attacker has control over the `pdfFilePath` variable passed into `pdf-image`.

## Recommendation

Update to version 2.0.0 or later.

 https://cve.radiocsirt.org/vuln/gsd-2018-3757 gsd-2018-3757 2026-10-16T13:47:04.580367+00:00 gsd-2018-3757