Arbitrary Code Execution

bpampuch/pdfmake is vulnerable to arbitrary code execution. The vulnerability exists in eval() function of server.js due to lack of sanitization of the data sent to the server which allows an attacker to inject and execute malicious codes in to the system.