Command Injection

Overview pdf-image is a library that provides an interface to convert PDF's pages to png files in Node.js by using ImageMagick. Affected versions of this package are vulnerable to Command Injection through the PDFImage function, due to improper user input validation. PoC js const pkg =...