@dfeidao/server (>=5.0.0, <=5.0.1), @mm-works/p000005 (>=1.0.202004231823, <=1.0.202004272011) +6 more potentially affected by CVE-2020-7762 via jsreport-chrome-pdf (>=1.0.0, <=1.9.0)

jsreport-chrome-pdf NPM version =1.0.0, =5.0.0, =1.0.202004231823, =1.0.202003051337, =1.6.2-patch.1, =2.0.0, =0.0.1, =0.0.2 - jsreport-worker 0.3.1 Source cves: CVE-2020-7762 Source advisory: OSV:GHSA-934W-HVJ4-7FR6...

CVE-2020-7762

This affects the package jsreport-chrome-pdf before 1.10.0...

CVE-2020-7762

This affects the package jsreport-chrome-pdf before 1.10.0...

CVE-2020-7762

CVE-2020-7762 affects the package jsreport-chrome-pdf prior to version 1.10.0. The vulnerability enables an arbitrary file read via the vulnerability in the code path tied to lib/conversion.js, as documented by multiple sources (Snyk entry and GitHub advisory). Impact is: attacker can read local ...

CVE-2020-7762 Arbitrary File Read

This affects the package jsreport-chrome-pdf before 1.10.0...

@dfeidao/server (>=5.0.0, <=5.0.1), @mm-works/p000005 (>=1.0.202004231823, <=1.0.202004272011) +6 more potentially affected by CVE-2020-7762 via jsreport-chrome-pdf (>=1.0.0, <=1.9.0)

jsreport-chrome-pdf NPM version =1.0.0, =5.0.0, =1.0.202004231823, =1.0.202003051337, =1.6.2-patch.1, =2.0.0, =0.0.1, =0.0.2 - jsreport-worker 0.3.1 Source cves: CVE-2020-7762 Source advisory: SNYK:JS-JSREPORTCHROMEPDF-1037310...