{"action":"Upgrade ngx-extended-pdf-viewer to 29.0.0-rc.3 or later.","affected":[{"fixed":"29.0.0-rc.3","introduced":"27.0.0-rc.0"}],"component":"ngx-extended-pdf-viewer","cve_ids":[],"ecosystem":"npm","exploited":false,"fixed_versions":["29.0.0-rc.3"],"ghsa_id":"GHSA-w9hm-4m3m-fxmm","id":"tcs_01M5KGEMMJPQERT1HYMANN3T5P","modified_at":"2026-08-06T21:30:14.752078479Z","published_at":"2026-08-06T21:13:59Z","references":["https://osv.dev/vulnerability/GHSA-w9hm-4m3m-fxmm","https://github.com/stephanrauh/ngx-extended-pdf-viewer/security/advisories/GHSA-w9hm-4m3m-fxmm","https://github.com/stephanrauh/ngx-extended-pdf-viewer"],"severity":{"label":"high"},"sources":[{"source":"osv","source_id":"GHSA-w9hm-4m3m-fxmm","url":"https://osv.dev/vulnerability/GHSA-w9hm-4m3m-fxmm"}],"summary":"ngx-extended-pdf-viewer bundles a version of pdf.js vulnerable to CVE-2026-16633"}