CVE-2026-26801-pdfmake-ssrf

pdfmake SSRF भेद्यता PoC भेद्यता सारांश...

CVE-2026-26801

Server-Side Request Forgery SSRF vulnerability in pdfmake versions 0.3.0-beta.2 through 0.3.5 allows a remote attacker to obtain sensitive information via the src/URLResolver.js component. The fix was released in version 0.3.6 which introduces the setUrlAccessPolicy method allowing server operato...

@ind-rcg/generator (>=262.1002.0-beta.2, <=264.1004.0-beta.1), @ind-rcg/modeler-sfdx-cli-plugin (>=262.1002.0-beta.4, <=264.1004.0-beta.4) +2 more potentially affected by CVE-2026-26801 via pdfmake (>=0.3.0-beta.2, <=0.3.2)

pdfmake NPM version =0.3.0-beta.2, =262.1002.0-beta.2, =262.1002.0-beta.4, =262.1002.0-beta.3, =1.0.0, =2.3.0 Source cves: CVE-2026-26801 Source advisory: OSV:GHSA-WP52-R2FP-4VMR...

@agentic-ui-experience/ui-arcgis (>=0.0.1-beta.1, <=0.0.1-beta.4), @amcharts/amcharts5 (>=5.18.0, <=5.20.2) +124 more potentially affected by CVE-2026-26801 via pdfmake (>=0.3.0-beta.2, <=0.3.11)

pdfmake NPM version =0.3.0-beta.2, =0.0.1-beta.1, =5.18.0, =0.0.1, =4.32.0-next.84, =4.32.0-next.84, =4.32.0-next.84, =5.1.0-next.124, =4.34.0-next.52, =4.34.0-next.29, =4.34.0-next.29, =0.2.0, =0.0.1, =1.0.57, =1.3.1 - @bugenzi/formpdf-editor 0.1.0 and more Source cves: CVE-2026-26801 Source...