| Package | Affected versions | Patched versions |
|---|---|---|
| pdfkit | < 0.8.7.2 | 0.8.7.2 |
| pdfkit | ≥ 0.0.0 |
The package pdfkit is vulnerable to Command Injection where the URL is not properly sanitized.
Note: This issue was patched in 0.8.7.2, but the patch was discovered to be ineffective. The updated patch version is 0.8.7.2.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free