78 matches found
vue3-pdfmake (>=1.0.0, <=2.2.0) potentially affected by CVE-2025-11362 via pdfmake (>=0.3.0-beta.2, <=0.3.0-beta.5)
pdfmake NPM version =0.3.0-beta.2, =1.0.0, =2.2.0 Source cves: CVE-2025-11362 Source advisory: MEND:CVE-2025-11362...
CVE-2025-11362
CVE-2025-11362 affects the pdfmake package prior to 0.3.0-beta.17, where an attacker can trigger repeated URL redirects in file embedding, potentially causing the application to crash or become unresponsive. The issue is categorized as Allocation of Resources Without Limits or Throttling and has ...
CVE-2025-11362
Versions of the package pdfmake from 0.3.0-beta.1 and before 0.3.0-beta.17 are vulnerable to Allocation of Resources Without Limits or Throttling via repeatedly redirect URL in file embedding. An attacker can cause the application to crash or become unresponsive by providing crafted input that...
PT-2025-41215
Name of the Vulnerable Software and Affected Versions pdfmake affected versions not specified Liferay Portal affected versions not specified Description A cross-site scripting issue exists in Liferay Portal. A resource allocation issue without limits or throttling exists in pdfmake. Recommendatio...
PT-2025-40963
Name of the Vulnerable Software and Affected Versions pdfmake versions prior to 0.3.0-beta.17 Description The software is susceptible to a denial-of-service condition due to unrestricted resource allocation. This occurs when processing crafted input that repeatedly redirects URLs during file...
CVE-2025-11362: Allocation of Resources Without Limits or Throttling
Versions of the package pdfmake from 0.3.0-beta.1 and before 0.3.0-beta.17 are vulnerable to Allocation of Resources Without Limits or Throttling via repeatedly redirect URL in file embedding. An attacker can cause the application to crash or become unresponsive by providing crafted input that...
pdfmake security vulnerability
pdfmake is a pure JavaScript server-side and client-side PDF document generation library from the individual developer Bartek Pampuch. A security vulnerability exists in pdfmake versions prior to 0.3.0-beta.17, which stems from duplicate redirect URLs in file embedding leading to an unlimited...
EUVD-2022-48992
Malicious code in bioql PyPI...
MAL-2025-42041 Malicious code in node-pdfmake (npm)
The package node-pdfmake was found to contain malicious code...
Malicious code in node-pdfmake (npm)
The package node-pdfmake was found to contain malicious code...
CVE-2024-25180
An issue discovered in pdfmake 0.2.9 allows remote attackers to run arbitrary code via crafted POST request to the /pdf endpoint. NOTE: this is disputed because the behavior of the /pdf endpoint is intentional. The /pdf endpoint is only available after installing a test framework that lives outsi...
Allocation of Resources Without Limits or Throttling
Overview org.webjars.npm:pdfmake is a Client/server side PDF printing in pure JavaScript Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling via repeatedly redirect URL in file embedding. An attacker can cause the application to crash or become...
vue3-pdfmake (>=1.0.0, <=2.2.0) potentially affected by CVE-2025-11362 via pdfmake (>=0.3.0-beta.2, <=0.3.0-beta.5)
pdfmake NPM version =0.3.0-beta.2, =1.0.0, =2.2.0 Source cves: CVE-2025-11362 Source advisory: SNYK:JS-PDFMAKE-10223297...
Allocation of Resources Without Limits or Throttling
Overview pdfmake is a Client/server side PDF printing in pure JavaScript Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling via repeatedly redirect URL in file embedding. An attacker can cause the application to crash or become unresponsive by...
Exploit for Code Injection in Pdfmake_Project Pdfmake
CVE-2024-25180 Overview pdfmake is a pure JavaScript clien...
CVE-2022-46161
pdfmake is an open source client/server side PDF printing in pure JavaScript. In versions up to and including 0.2.5 pdfmake contains an unsafe evaluation of user controlled input. Users of pdfmake are thus subject to arbitrary code execution in the context of the process running the pdfmake code...
Security Bulletin: pdfmake vulnerability affect IBM Spectrum Control
Summary Vulnerability in pdfmake could allow a remote attacker to execute arbitrary code on the system, which could affect IBM Spectrum Control. CVE-2024-25180. Vulnerability Details CVEID:CVE-2024-25180 DESCRIPTION: pdfmake could allow a remote attacker to execute arbitrary code on the system,...
Security Bulletin: IBM Watson Discovery for IBM Cloud Pak for Data affected by vulnerability in Node.js
Summary IBM Watson Discovery for IBM Cloud Pak for Data contains a vulnerable version of Node.js Vulnerability Details CVEID:CVE-2024-25180 DESCRIPTION: pdfmake could allow a remote attacker to execute arbitrary code on the system, caused by improper neutralization of user supplied-input. By...
CVE-2024-25180
An issue discovered in pdfmake 0.2.9 allows remote attackers to run arbitrary code via crafted POST request to the /pdf endpoint. NOTE: this is disputed because the behavior of the /pdf endpoint is intentional. The /pdf endpoint is only available after installing a test framework that lives outsi...
