https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 19 Oct 2026 22:09:49 +0000 https://cve.radiocsirt.org/vuln/bdu:2018-00913 bdu:2018-00913 https://cve.radiocsirt.org/vuln/bdu:2018-00913 https://cve.radiocsirt.org/vuln/cnvd-2018-13379 cnvd-2018-13379 https://cve.radiocsirt.org/vuln/cnvd-2018-13379 https://cve.radiocsirt.org/vuln/euvd-2026-61326 EUVD-2026-61326 https://cve.radiocsirt.org/vuln/euvd-2026-61326 https://cve.radiocsirt.org/vuln/fkie_cve-2018-3746 <p>The pdfinfojs NPM module versions &lt;= 0.3.6 has a command injection vulnerability that allows an attacker to execute arbitrary commands on the victim&#39;s machine.</p> <p>The pdfinfojs NPM module versions &lt;= 0.3.6 has a command injection vulnerability that allows an attacker to execute arbitrary commands on the victim&#39;s machine.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2018-3746 https://cve.radiocsirt.org/vuln/ghsa-3pxp-6963-46r9 <p><strong>Affected:</strong> npm: pdfinfojs</p> <p>Versions of `pdfinfojs` before 0.4.1 are vulnerable to command injection. This is exploitable if an attacker can control the filename parameter that is passed into the `pdfinfojs` constructor.</p> <p>## Recommendation</p> <p>Update to version 0.4.1 or later.</p> <p><strong>Affected:</strong> npm: pdfinfojs</p> <p>Versions of `pdfinfojs` before 0.4.1 are vulnerable to command injection. This is exploitable if an attacker can control the filename parameter that is passed into the `pdfinfojs` constructor.</p> <p>## Recommendation</p> <p>Update to version 0.4.1 or later.</p> https://cve.radiocsirt.org/vuln/ghsa-3pxp-6963-46r9 https://cve.radiocsirt.org/vuln/gsd-2018-3746 gsd-2018-3746 https://cve.radiocsirt.org/vuln/gsd-2018-3746