https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-19T22:09:49.937823+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2018-00913 bdu:2018-00913 2026-10-19T22:09:49.941160+00:00 bdu:2018-00913 https://cve.radiocsirt.org/vuln/cnvd-2018-13379 cnvd-2018-13379 2026-10-19T22:09:49.941190+00:00 cnvd-2018-13379 https://cve.radiocsirt.org/vuln/euvd-2026-61326 EUVD-2026-61326 2026-10-19T22:09:49.941205+00:00 EUVD-2026-61326 https://cve.radiocsirt.org/vuln/fkie_cve-2018-3746 fkie_cve-2018-3746 2026-10-19T22:09:49.941217+00:00

The pdfinfojs NPM module versions <= 0.3.6 has a command injection vulnerability that allows an attacker to execute arbitrary commands on the victim's machine.

 https://cve.radiocsirt.org/vuln/ghsa-3pxp-6963-46r9 GHSA-3pxp-6963-46r9 — Command Injection in pdfinfojs 2026-10-19T22:09:49.941252+00:00

Affected: npm: pdfinfojs

Versions of `pdfinfojs` before 0.4.1 are vulnerable to command injection. This is exploitable if an attacker can control the filename parameter that is passed into the `pdfinfojs` constructor.

## Recommendation

Update to version 0.4.1 or later.

 https://cve.radiocsirt.org/vuln/gsd-2018-3746 gsd-2018-3746 2026-10-19T22:09:49.941277+00:00 gsd-2018-3746