Description
The pdfinfojs NPM module versions <= 0.3.6 has a command injection vulnerability that allows an attacker to execute arbitrary commands on the victim's machine.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| HackerOne | pdfinfojs | <=0.3.6 | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| npm | pdfinfojs | < 0.4.1 | 0.4.1 | GHSA-3pxp-6963-46r9 |