Skip to content
OpenAdvisories

Package · Ubuntu

pandoc

3 known vulnerabilities.

3 results · Feed

  • Low 3.7
    CVE-2025-51591 Public exploit

    A Server-Side Request Forgery (SSRF) in JGM Pandoc v3.6.4 allows attackers to gain access to and compromise the whole i…

  • Unscored —

    Pandoc before 3.1.6 allows arbitrary file write: this can be triggered by providing a crafted image element in the inpu…

  • Medium 6.0

    Arbitrary file write is possible in Pandoc when using PDF output or --extract-media with untrusted input

    Pandoc is a Haskell library for converting from one markup format to another, and a command-line tool that uses this library. Starting in version 1.13 and prior to version 3.1.4, Pandoc is susceptible to an arbitrary file write vulnerability, which can be tri…