| Package | Affected versions | Patched versions |
|---|---|---|
| foxit reader | < 10.1.4 | 10.1.4 |
| phantompdf | < 10.1.4 | 10.1.4 |
An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4. It allows writing to arbitrary files because a CombineFiles pathname is not validated.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free