Skip to content
OpenAdvisories

Package · npm

libreoffice-convert

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.5
    CVE-2026-54732

    libreoffice-convert: path traversal / arbitrary file write

    libreoffice-convert is a Node.js module for converting office documents to different formats. Prior to 1.8.2, index.js uses the caller-controlled options.fileName value in path.join(tempDir.name, fileName) without reducing it to a base name. A filename contai…

    elwerene libreoffice-convert libreoffice-convert npm