Lucene search
GoogleOSV:GHSA-RV7P-MMWQ-X674HistoryMay 10, 2021 - 6:46 p.m.
Improper Input Validation and Code Injection in pdf-image
2021-05-1018:46:58
Google
osv.dev
8
input validation
code injection
pdf-image
npm package
arbitrary code
untrusted user input
EPSS
0.006
Percentile
78.9%
Lack of input validation in pdf-image npm package version <= 2.0.0 may allow an attacker to run arbitrary code if PDF file path is constructed based on untrusted user input.
Related
cve
cve
CVE-2020-8132
2020-02-28 20:15:11
hackerone
hackerone
nvd
nvd
CVE-2020-8132
2020-02-28 20:15:11
github
github
Improper Input Validation and Code Injection in pdf-image
2021-05-10 18:46:58
cvelist
cvelist
CVE-2020-8132
2020-02-28 19:24:41
prion
prion
Input validation
2020-02-28 20:15:00
veracode
veracode
Arbitrary Code Execution
2020-03-02 02:52:33