@pdfme/common
npm · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| PDFME has SSRF via Unvalidated URL Fetch in `getB64BasePdf` When `basePdf` Is Attacker-Controlled | @pdfme/common | npm | Medium | Fix reported | |
| @pdfme/common vulnerable to to XSS and Prototype Pollution through its expression evaluation | @pdfme/common | npm | Medium | Fix reported |