Top technology
Linux 13140
Google 12525
Microsoft 12378
Apple 6692
Oracle 6673
Adobe 6383
Ibm 6286
Cisco 5751
Debian 3919
Mozilla 2886
Apache 2864
Redhat 2586
CRITICAL 9.8
CVE-2026-26830
pdf-image (npm package) through version 2.0.0 allows OS command injection via the pdfFilePath parameter. The constructGetInfoCommand and constructCon…
Pdf Image
after 2.0.0
CRITICAL 9.8
CVE-2020-8132
Lack of input validation in pdf-image npm package version <= 2.0.0 may allow an attacker to run arbitrary code if PDF file path is constructed based …
Pdf Image
after 2.0.0
CRITICAL 9.8
CVE-2018-3757
Command injection exists in pdf-image v2.0.0 due to an unescaped string parameter.
Pdf Image
Patch available