Browse all 6 CVE security advisories affecting pdfme. AI-powered Chinese analysis, POCs, and references for each vulnerability.
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-82868 | @pdfme/schemas before 5.5.9 Cross-Site Scripting via SVG — schemas CWE-79 | 6.1 | Medium | 2026-08-31 |
| CVE-2026-82867 | @pdfme/schemas before 5.5.9 Cross-Site Scripting via Select — schemas CWE-79 | 6.1 | Medium | 2026-08-31 |
| CVE-2026-82866 | @pdfme/common before 5.5.10 SSRF via Unvalidated URL Fetch — common CWE-918 | 6.8 | Medium | 2026-08-31 |
| CVE-2026-82865 | pdfme schemas before 5.5.10 Cross-Site Scripting via i18n Label — schemas CWE-79 | 4.4 | Medium | 2026-08-31 |
| CVE-2026-82864 | pdfme pdf-lib before 5.5.10 Denial of Service via Decompression Bomb — pdf-lib CWE-409 | 6.5 | Medium | 2026-08-31 |
| CVE-2025-53626 | pdfme has Sandbox Escape and Prototype Pollution vulnerabilities in pdfme expression evaluation — pdfme CWE-94 | 6.1 | Medium | 2025-07-10 |
This page lists every published CVE security advisory associated with pdfme. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.