Skip to content
OpenAdvisories

Package · Debian

pandoc

2 known vulnerabilities.

2 results · Feed

  • Low 3.7
    CVE-2025-51591 Public exploit

    A Server-Side Request Forgery (SSRF) in JGM Pandoc v3.6.4 allows attackers to gain access to and compromise the whole i…

  • Medium 6.0

    Arbitrary file write is possible in Pandoc when using PDF output or --extract-media with untrusted input

    Pandoc is a Haskell library for converting from one markup format to another, and a command-line tool that uses this library. Starting in version 1.13 and prior to version 3.1.4, Pandoc is susceptible to an arbitrary file write vulnerability, which can be tri…