CVE-2026-16633
1 advisory.
npm/pdfjs-dist CVE-2026-16633: high
PDF.js: Arbitrary JavaScript execution upon opening a malicious PDF
Action: Upgrade pdfjs-dist to 6.2.108 or later.
npm i pdfjs-dist@6.2.108Affected
| introduced | fixed | last affected |
|---|---|---|
| 5.6.83 | 6.2.108 | - |
Fixed versions
| 6.2.108 |
Sources
- osv: GHSA-hq66-cqwq-w95j
- https://github.com/mozilla/pdf.js/security/advisories/GHSA-hq66-cqwq-w95j
- https://bugzilla.mozilla.org/show_bug.cgi?id=2055885
- https://github.com/mozilla/pdf.js
CVE-2026-16633 · published · modified · JSON