horace-adapter-offline-pdf (>=0.0.1 <=0.0.5), pdftohpubjs (>=0.1.0 <=0.3.10) potentially affected by CVE-2018-3746 via pdfinfojs (>=0.3.1 <=0.3.6)

pdfinfojs NPM version =0.3.1, =0.0.1, =0.1.0, =0.3.10 Source cves: CVE-2018-3746 Source advisory: OSV:GHSA-3PXP-6963-46R9...

CVE-2018-3746

The pdfinfojs NPM module versions = 0.3.6 has a command injection vulnerability that allows an attacker to execute arbitrary commands on the victim's machine...

CVE-2018-3746

The CVE-2018-3746 entry covers the pdfinfojs NPM module, where versions