Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 04:14:02 +0000 CVE-2024-34342 — react-pdf's PDF.js vulnerable to arbitrary JavaScript execution upon opening a malicious PDF https://cve.radiocsirt.org/vuln/cve-2024-34342 <p><strong>Affected:</strong> wojtekmaj react-pdf, pdf.js_viewer_project pdf.js_viewer</p> <p>react-pdf displays PDFs in React apps. If PDF.js is used to load a malicious PDF, and PDF.js is configured with `isEvalSupported` set to `true` (which is the default value), unrestricted attacker-controlled JavaScript will be executed in the context of the hosting domain. This vulnerability is fixed in 7.7.3 and 8.0.2.</p> <p><strong>Affected:</strong> wojtekmaj react-pdf, pdf.js_viewer_project pdf.js_viewer</p> <p>react-pdf displays PDFs in React apps. If PDF.js is used to load a malicious PDF, and PDF.js is configured with `isEvalSupported` set to `true` (which is the default value), unrestricted attacker-controlled JavaScript will be executed in the context of the hosting domain. This vulnerability is fixed in 7.7.3 and 8.0.2.</p> https://cve.radiocsirt.org/vuln/cve-2024-34342