Pdfme

4 CVEs across 4 Pdfme products. Browse Pdfme vulnerabilities, severities, and proof-of-concept exploits.

Pdfme products with known CVEs

ProductCVEs
Common1
Pdf-Lib1
Pdfme1
Schemas1
Pdfme CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-82867Medium6.12026-08-31@pdfme/schemas before 5.5.9 contains a cross-site scripting vulnerability in the Select schema plugin that fails to sanitize option values before interpolating…
CVE-2026-82866Medium6.82026-08-31@pdfme/common before 5.5.10 contains a server-side request forgery vulnerability in the getB64BasePdf function that fetches arbitrary URLs without validation w…
CVE-2026-82864Medium6.52026-08-31pdfme pdf-lib versions before 5.5.10 contain an unbounded buffer growth vulnerability in the DecodeStream.ensureBuffer() method that allows attackers to cause…
CVE-2025-53626Medium6.12025-07-10pdfme is a TypeScript-based PDF generator and React-based UI. The expression evaluation feature in pdfme 5.2.0 to 5.4.0 contains critical vulnerabilities allow…