https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 21 Oct 2026 11:09:40 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-185910 EUVD-2026-185910 https://cve.radiocsirt.org/vuln/euvd-2026-185910 https://cve.radiocsirt.org/vuln/fkie_cve-2023-26155 <p>All versions of the package node-qpdf are vulnerable to Command Injection such that the package-exported method encrypt() fails to sanitize its parameter input, which later flows into a sensitive command execution API. As a result, attackers may inject malicious commands once they can specify the input pdf file path.</p> <p>All versions of the package node-qpdf are vulnerable to Command Injection such that the package-exported method encrypt() fails to sanitize its parameter input, which later flows into a sensitive command execution API. As a result, attackers may inject malicious commands once they can specify the input pdf file path.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-26155 https://cve.radiocsirt.org/vuln/ghsa-fpr8-4wvx-j9q3 <p><strong>Affected:</strong> npm: node-qpdf</p> <p>All versions of the package node-qpdf are vulnerable to Command Injection such that the package-exported method encrypt() fails to sanitize its parameter input, which later flows into a sensitive command execution API. As a result, attackers may inject malicious commands once they can specify the input pdf file path.</p> <p><strong>Affected:</strong> npm: node-qpdf</p> <p>All versions of the package node-qpdf are vulnerable to Command Injection such that the package-exported method encrypt() fails to sanitize its parameter input, which later flows into a sensitive command execution API. As a result, attackers may inject malicious commands once they can specify the input pdf file path.</p> https://cve.radiocsirt.org/vuln/ghsa-fpr8-4wvx-j9q3 https://cve.radiocsirt.org/vuln/gsd-2023-26155 gsd-2023-26155 https://cve.radiocsirt.org/vuln/gsd-2023-26155