CVE-2025-53626
1 advisory.
npm/@pdfme/common CVE-2025-53626: medium 6.1, EPSS 0.33%
@pdfme/common vulnerable to to XSS and Prototype Pollution through its expression evaluation
Action: Upgrade @pdfme/common to 5.4.1 or later.
npm i @pdfme/common@5.4.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 5.2.0 | 5.4.1 | - |
Fixed versions
| 5.4.1 |
Sources
- osv: GHSA-54xv-94qv-2gfg
- https://github.com/pdfme/pdfme/security/advisories/GHSA-54xv-94qv-2gfg
- https://nvd.nist.gov/vuln/detail/CVE-2025-53626
- https://github.com/pdfme/pdfme/pull/1117
- https://github.com/pdfme/pdfme/commit/0dd54739acff2c249ed68c001a896bee38f0fd85
- https://github.com/pdfme/pdfme
- https://github.com/pdfme/pdfme/releases/tag/5.4.1
CVE-2025-53626 · published · modified · JSON