Skip to content
OpenAdvisories

Weakness (CWE)

CWE-1103: Use of Platform-Dependent Third Party Components

Base Incomplete Mapping prohibited

The product relies on third-party components that do
not provide equivalent functionality across all desirable
platforms.

Source: MITRE CWE-1103

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High —
    GHSA-w9hm-4m3m-fxmm

    ngx-extended-pdf-viewer bundles a version of pdf.js vulnerable to CVE-2026-16633

    ngx-extended-pdf-viewer embeds a fork of Mozilla's pdf.js rather than depending on pdfjs-dist, so this vulnerability is not visible to dependency scanners through package.json. ### Impact Opening a malicious PDF can execute attacker-controlled JavaScript in t…

    ngx-extended-pdf-viewer npm