CVE-2021-23639
1 advisory.
npm/md-to-pdf CVE-2021-23639: critical 9.8, EPSS 5.41%
Code Injection in md-to-pdf.
Action: Upgrade md-to-pdf to 5.0.0 or later.
npm i md-to-pdf@5.0.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 5.0.0 | - |
Fixed versions
| 5.0.0 |
Sources
- osv: GHSA-x949-7cm6-fm6p
- https://nvd.nist.gov/vuln/detail/CVE-2021-23639
- https://github.com/simonhaenisch/md-to-pdf/issues/99
- https://github.com/simonhaenisch/md-to-pdf/commit/a716259c548c82fa1d3b14a3422e9100619d2d8a
- https://github.com/simonhaenisch/md-to-pdf
- https://snyk.io/vuln/SNYK-JS-MDTOPDF-1657880
CVE-2021-23639 · published · modified · JSON