Markdown To Pdf Security Vulnerabilities

cve

CVE-2021-23639

The package md-to-pdf before 5.0.0 are vulnerable to Remote Code Execution (RCE) due to utilizing the library gray-matter to parse front matter content, without disabling the JS engine.

9.8CVSS

9.7AI Score

0.019EPSS

2021-12-10 08:15 PM