easy-pdf-merge vulnerabilities

CVEs whose affected-version data names the easy-pdf-merge package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2020-37279High· 8.1PoC

2w ago

easy-pdf-merge 0.1.0 through 0.2.6 contains an OS command injection vulnerability that allows attackers to execute commands by injecting shell metacharacters into source paths, destination path, or maxHeap option

easy-pdf-merge 0.1.0 through 0.2.6 contains an OS command injection vulnerability that allows attackers to execute commands by injecting shell metacharacters into source paths, destination path, or maxHeap option. Attackers can supply fi…

▾ Midnightkaruppiah7890 · easy-pdf-mergeEPSS 1.9%via NVD