Skip to content
OpenAdvisories

Package · npm

ngx-extended-pdf-viewer

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • High —
    GHSA-w9hm-4m3m-fxmm

    ngx-extended-pdf-viewer bundles a version of pdf.js vulnerable to CVE-2026-16633

    ngx-extended-pdf-viewer embeds a fork of Mozilla's pdf.js rather than depending on pdfjs-dist, so this vulnerability is not visible to dependency scanners through package.json. ### Impact Opening a malicious PDF can execute attacker-controlled JavaScript in t…

    ngx-extended-pdf-viewer npm