tocsin

npm/libreoffice-convert CVE-2026-54732: medium 6.5, EPSS 0.42%

libreoffice-convert vulnerable to path traversal / arbitrary file write

Action: Upgrade libreoffice-convert to 1.8.2 or later.

npm i libreoffice-convert@1.8.2

Affected

introducedfixedlast affected
01.8.2-

Fixed versions

1.8.2

Sources

CVE-2026-54732 · published · modified · JSON