Weakness (CWE)
CWE-1103: Use of Platform-Dependent Third Party Components
Base Incomplete Mapping prohibited
The product relies on third-party components that do
not provide equivalent functionality across all desirable
platforms.
Source: MITRE CWE-1103
3 results · Feed
-
High —
ngx-extended-pdf-viewer bundles a version of pdf.js vulnerable to CVE-2026-16633
ngx-extended-pdf-viewer embeds a fork of Mozilla's pdf.js rather than depending on pdfjs-dist, so this vulnerability is not visible to dependency scanners through package.json. ### Impact Opening a malicious PDF can execute attacker-controlled JavaScript in t…
-
Medium 4.0
Use of Platform-Dependent Third Party Components in cockpit-hq/cockpit
Use of Platform-Dependent Third Party Components in GitHub repository cockpit-hq/cockpit prior to 2.4.0.
-
Unscored —
A CWE-1103: Use of Platform-Dependent Third Party Components with vulnerabilities vulnerability exists in Easergy T300 …