https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-23T15:44:09.245785+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-164455 EUVD-2026-164455 2026-10-23T15:44:09.310894+00:00 EUVD-2026-164455 https://cve.radiocsirt.org/vuln/fkie_cve-2018-3770 fkie_cve-2018-3770 2026-10-23T15:44:09.310934+00:00

A path traversal exists in markdown-pdf version <9.0.0 that allows a user to insert a malicious html code that can result in reading the local files.

 https://cve.radiocsirt.org/vuln/ghsa-p7c9-jqhq-vr3v GHSA-p7c9-jqhq-vr3v — Remote Code Execution in markdown-pdf 2026-10-23T15:44:09.310968+00:00

Affected: npm: markdown-pdf

Versions of `markdown-pdf` prior to 9.0.0 are vulnerable to Remote Code Execution. The package fails to sanitize HTML code in markdown files. If markdown files with malicious HTML are converted to PDF, the resulting PDF file will execute any JavaScript code in the original markdown file. This may allow attackers to execute Remote Code.

## Recommendation

Upgrade to version 9.0.0 or later.

 https://cve.radiocsirt.org/vuln/gsd-2018-3770 gsd-2018-3770 2026-10-23T15:44:09.310996+00:00 gsd-2018-3770