Skip to content
OpenAdvisories

Package · Debian

pdfkit

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • High 8.4
    CVE-2025-26240 Public exploit

    pdfkit: Path traversal in from_string

    In JazzCore python-pdfkit 1.0.0, the from_string method enables the execution of JavaScript code within the context of the server application and the exfiltration of local files.

    pdfkit pdfkit pdfkit Debian Ubuntu PyPI