pdfme

Products

ProductCVEsExploitedLatest
schemas3–Aug 31, 2026
common2–Oct 23, 2026
pdf-lib1–Aug 31, 2026
pdfme1–Jul 10, 2025

Exploited and recent CVEs

  • CVE-2026-115729 Medium 6.8 @pdfme/common 5.5.10 before 6.2.6 SSRF via isUrlSafeToFetch Bypass 0.4%
  • CVE-2026-82868 Medium 6.1 @pdfme/schemas before 5.5.9 Cross-Site Scripting via SVG 0.3%
  • CVE-2026-82867 Medium 6.1 @pdfme/schemas before 5.5.9 Cross-Site Scripting via Select 0.3%
  • CVE-2026-82866 Medium 6.8 @pdfme/common before 5.5.10 SSRF via Unvalidated URL Fetch 0.3%
  • CVE-2026-82865 Medium 4.4 pdfme schemas before 5.5.10 Cross-Site Scripting via i18n Label 0.2%
  • CVE-2026-82864 Medium 6.5 pdfme pdf-lib before 5.5.10 Denial of Service via Decompression Bomb 0.4%
  • CVE-2025-53626 Medium 6.1 pdfme has Sandbox Escape and Prototype Pollution vulnerabilities in pdfme expression evaluation 0.3%