PD
Vendor
pdfme
7
CVEs
0
On KEV
1
New 30D
Products
CO6.8
common
pdfme
2 CVEs0 on KEV1 new
SC6.1
schemas
pdfme
3 CVEs0 on KEV0 new
PD6.5
pdf-lib
pdfme
1 CVEs0 on KEV0 new
PD6.1
pdfme
pdfme
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-115729 New | CO common pdfme | 6.8 | Oct 23 | @pdfme/common 5.5.10 before 6.2.6 SSRF via isUrlSafeToFetch Bypass |
| CVE-2026-82868 | SC schemas pdfme | 6.1 | Aug 31 | @pdfme/schemas before 5.5.9 Cross-Site Scripting via SVG |
| CVE-2026-82867 | SC schemas pdfme | 6.1 | Aug 31 | @pdfme/schemas before 5.5.9 Cross-Site Scripting via Select |
| CVE-2026-82866 | CO common pdfme | 6.8 | Aug 31 | @pdfme/common before 5.5.10 SSRF via Unvalidated URL Fetch |
| CVE-2026-82865 | SC schemas pdfme | 4.4 | Aug 31 | pdfme schemas before 5.5.10 Cross-Site Scripting via i18n Label |
| CVE-2026-82864 | PD pdf-lib pdfme | 6.5 | Aug 31 | pdfme pdf-lib before 5.5.10 Denial of Service via Decompression Bomb |
| CVE-2025-53626 | PD pdfme pdfme | 6.1 | Jul 10 | pdfme has Sandbox Escape and Prototype Pollution vulnerabilities in pdfme expression evaluation |