| Package | Affected versions | Patched versions |
|---|---|---|
| pdf editor | ≥ 14.0.0.33046, ≤ 14.0.4.33508≥ 2023.1.0.15510, ≤ 2023.3.0.23028≥ 2024.1.0.23997, ≤ 2024.4.1.27687≥ 2025.1.0.27937, ≤ 2025.3.0.35737≥ 2026.1.0.36452, ≤ 2026.1.1.36485≤ 13.2.4.24048 | |
| pdf reader | ≤ 2026.1.1.36485 |
The input file does not need to be strictly in a structurally valid PDF format. Instead, after reviewing the content, the original document disguised as a PDF will be sent to the parser. Malicious documents will construct malicious external entities that, through the protocol, point to local paths, thereby allowing access to any local files within the user's permission range.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free