{"action":"Upgrade pdfmake to 0.3.0-beta.17 or later.","affected":[{"fixed":"0.3.0-beta.17","introduced":"0.3.0-beta.1"}],"component":"pdfmake","cve_ids":["CVE-2025-11362"],"ecosystem":"npm","epss":0.0043,"exploited":false,"fixed_versions":["0.3.0-beta.17"],"ghsa_id":"GHSA-rj3r-r7hh-jxfq","id":"tcs_01M5KG980RKST9ZD2GJVPPVNGH","modified_at":"2026-09-10T03:50:58.324477242Z","published_at":"2025-10-07T06:31:12Z","references":["https://osv.dev/vulnerability/GHSA-rj3r-r7hh-jxfq","https://nvd.nist.gov/vuln/detail/CVE-2025-11362","https://github.com/bpampuch/pdfmake/issues/2886","https://github.com/bpampuch/pdfmake/commit/741169634bf07730e010cd77477b6cc038e846ed","https://github.com/bpampuch/pdfmake","https://security.snyk.io/vuln/SNYK-JS-PDFMAKE-10223297"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-rj3r-r7hh-jxfq","url":"https://osv.dev/vulnerability/GHSA-rj3r-r7hh-jxfq"}],"summary":"pdfmake is vulnerable to Throttling via repeatedly redirecting URL in file embedding"}