https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T02:11:50.977511+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2025-53626 CVE-2025-53626 — pdfme has Sandbox Escape and Prototype Pollution vulnerabilities in pdfme expression evaluation 2026-10-08T02:11:50.995397+00:00

Affected: pdfme

pdfme is a TypeScript-based PDF generator and React-based UI. The expression evaluation feature in pdfme 5.2.0 to 5.4.0 contains critical vulnerabilities allowing sandbox escape leading to XSS and prototype pollution attacks. This vulnerability is fixed in 5.4.1.