CVE-2025-65108
1 advisory.
npm/md-to-pdf CVE-2025-65108: critical 10, EPSS 0.96%
md-to-pdf vulnerable to arbitrary JavaScript code execution when parsing front matter
Action: Upgrade md-to-pdf to 5.2.5 or later.
npm i md-to-pdf@5.2.5Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 5.2.5 | - |
Fixed versions
| 5.2.5 |
Sources
- osv: GHSA-547r-qmjm-8hvw
- https://github.com/simonhaenisch/md-to-pdf/security/advisories/GHSA-547r-qmjm-8hvw
- https://nvd.nist.gov/vuln/detail/CVE-2025-65108
- https://github.com/simonhaenisch/md-to-pdf/commit/46bdcf2051c8d1758b391c1353185a179a47a4d9
- https://github.com/simonhaenisch/md-to-pdf
CVE-2025-65108 · published · modified · JSON