Soda PDF — Vulnerabilities & Security Advisories 10

Soda PDF is a document management solution primarily used for creating, editing, and converting PDF files. Historically, the application has been vulnerable to multiple remote code execution (RCE) and cross-site scripting (XSS) flaws, often through improper input validation and insecure deserialization. Privilege escalation vulnerabilities have also been documented, allowing unauthorized access to system resources. The software's security posture has been marked by consistent vulnerability disclosures, with 10 CVEs currently on record, highlighting ongoing security challenges in its handling of file parsing and user inputs.