CVE-2024-25180

The pdfmake JavaScript PDF generation library (version 0.2.9 and earlier) is vulnerable to Remote Code Execution (RCE) . The flaw stems from improper neutralization of user-supplied input, allowing remote attackers to execute arbitrary code by sending a specially crafted POST request to the /pdf ...