| Package | Affected versions | Patched versions |
|---|---|---|
| foxit reader | < 10.1.4 | 10.1.4 |
| phantompdf | < 10.1.4 | 10.1.4 |
An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4. It allows writing to arbitrary files because the extractPages pathname is not validated.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free