CVE-2025-11362

Versions of the package pdfmake before 0.3.0-beta.17 are vulnerable to Allocation of Resources Without Limits or Throttling via repeatedly redirect URL in file embedding. An attacker can cause the application to crash or become unresponsive by providing crafted input that triggers this condition...

GHSA-RJ3R-R7HH-JXFQ pdfmake is vulnerable to Throttling via repeatedly redirecting URL in file embedding

Versions of the package pdfmake from 0.3.0-beta.1 to before 0.3.0-beta.17 are vulnerable to Allocation of Resources Without Limits or Throttling via repeatedly redirect URL in file embedding. An attacker can cause the application to crash or become unresponsive by providing crafted input that...

EUVD-2025-32603

Versions of the package pdfmake before 0.3.0-beta.17 are vulnerable to Allocation of Resources Without Limits or Throttling via repeatedly redirect URL in file embedding. An attacker can cause the application to crash or become unresponsive by providing crafted input that triggers this condition...

pdfmake is vulnerable to Throttling via repeatedly redirecting URL in file embedding

Versions of the package pdfmake from 0.3.0-beta.1 to before 0.3.0-beta.17 are vulnerable to Allocation of Resources Without Limits or Throttling via repeatedly redirect URL in file embedding. An attacker can cause the application to crash or become unresponsive by providing crafted input that...

CVE-2025-11362

Versions of the package pdfmake from 0.3.0-beta.1 and before 0.3.0-beta.17 are vulnerable to Allocation of Resources Without Limits or Throttling via repeatedly redirect URL in file embedding. An attacker can cause the application to crash or become unresponsive by providing crafted input that...

CVE-2025-11362

CVE-2025-11362 affects the pdfmake package prior to 0.3.0-beta.17, where an attacker can trigger repeated URL redirects in file embedding, potentially causing the application to crash or become unresponsive. The issue is categorized as Allocation of Resources Without Limits or Throttling and has ...

CVE-2025-11362

Versions of the package pdfmake from 0.3.0-beta.1 and before 0.3.0-beta.17 are vulnerable to Allocation of Resources Without Limits or Throttling via repeatedly redirect URL in file embedding. An attacker can cause the application to crash or become unresponsive by providing crafted input that...

CVE-2025-11362

Versions of the package pdfmake from 0.3.0-beta.1 and before 0.3.0-beta.17 are vulnerable to Allocation of Resources Without Limits or Throttling via repeatedly redirect URL in file embedding. An attacker can cause the application to crash or become unresponsive by providing crafted input that...

CVE-2025-11362

Versions of the package pdfmake from 0.3.0-beta.1 and before 0.3.0-beta.17 are vulnerable to Allocation of Resources Without Limits or Throttling via repeatedly redirect URL in file embedding. An attacker can cause the application to crash or become unresponsive by providing crafted input that...

pdfmake 安全漏洞

pdfmake is a pure JavaScript server-side and client-side PDF document generation library from the individual developer Bartek Pampuch. A security vulnerability exists in pdfmake versions prior to 0.3.0-beta.17, which stems from duplicate redirect URLs in file embedding leading to an unlimited...

PT-2025-41215

Name of the Vulnerable Software and Affected Versions pdfmake affected versions not specified Liferay Portal affected versions not specified Description A cross-site scripting issue exists in Liferay Portal. A resource allocation issue without limits or throttling exists in pdfmake. Recommendatio...

PT-2025-40963

Name of the Vulnerable Software and Affected Versions pdfmake versions prior to 0.3.0-beta.17 Description The software is susceptible to a denial-of-service condition due to unrestricted resource allocation. This occurs when processing crafted input that repeatedly redirects URLs during file...

EUVD-2022-48992

Malicious code in bioql PyPI...

Malicious code in node-pdfmake (npm)

The package node-pdfmake was found to contain malicious code...

MAL-2025-42041 Malicious code in node-pdfmake (npm)

The package node-pdfmake was found to contain malicious code...

CVE-2024-25180

An issue discovered in pdfmake 0.2.9 allows remote attackers to run arbitrary code via crafted POST request to the /pdf endpoint. NOTE: this is disputed because the behavior of the /pdf endpoint is intentional. The /pdf endpoint is only available after installing a test framework that lives outsi...

Allocation of Resources Without Limits or Throttling

Overview pdfmake is a Client/server side PDF printing in pure JavaScript Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling via repeatedly redirect URL in file embedding. An attacker can cause the application to crash or become unresponsive by...

Allocation of Resources Without Limits or Throttling

Overview org.webjars.npm:pdfmake is a Client/server side PDF printing in pure JavaScript Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling via repeatedly redirect URL in file embedding. An attacker can cause the application to crash or become...

Exploit for Code Injection in Pdfmake_Project Pdfmake

CVE-2024-25180 Overview pdfmake is a pure JavaScript clien...

CVE-2022-46161

pdfmake is an open source client/server side PDF printing in pure JavaScript. In versions up to and including 0.2.5 pdfmake contains an unsafe evaluation of user controlled input. Users of pdfmake are thus subject to arbitrary code execution in the context of the process running the pdfmake code...