alam00000 has 3 CVEs on record. 3 were published in the last 90 days. The median CVSS is 6.8 (medium).
CVEs per month
Last 12 months, by publish date
- Exploited share
- 0% vs 1% corpus
- Median CVSS
- 6.8
- Publish → KEV
- —
- Last 90 days
- 3 prev 0
alam00000 vulnerabilities
CVEs affecting alam00000, newest first. Open any entry for full detail, references, and exploit status.
3 CVEsRSS
CVE-2026-102354Medium· 6.8BentoPDF is a privacy-focused PDF toolkit that runs in the browser
BentoPDF is a privacy-focused PDF toolkit that runs in the browser. In versions through 2.8.6, cloudflare/cors-proxy-worker.js performs a DNS-over-HTTPS safety check in hostnameResolvesToPrivate(), as used by isValidCertificateUrl() and …
CVE-2026-77581High· 8.6PoCBentoPDF is a client-side PDF toolkit that is self hostable
BentoPDF is a client-side PDF toolkit that is self hostable. In 2.8.6 and earlier, the certificate and timestamp CORS proxy in cloudflare/cors-proxy-worker.js uses isPrivateOrReservedHost() to validate a supplied hostname separately from…
CVE-2026-63630Low· 3.4PoCBentoPDF is a client-side PDF toolkit that is self hostable
BentoPDF is a client-side PDF toolkit that is self hostable. In 2.8.6 and earlier, deserializeWorkflow() accepts the Timestamp node's tsaUrl control from imported JSON without schema or destination validation. When a user imports the cra…