Description
Command injection exists in pdf-image v2.0.0 due to an unescaped string parameter.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| npm | pdf-image | < 2.0.0 | 2.0.0 | GHSA-5gwh-g79j-vh4q |
Critical · 9.8
CVE-2018-3757
EUVD-2020-0787GHSA-5gwh-g79j-vh4q
Command Injection in pdf-image
Published Jun 1, 2018 · Updated Sep 16, 2024 · Assigned by hackerone