VULNERABILITY INTELLIGENCE
CVE-2022-46161
CVSS score10 CRITICAL
EPSS probability1.73%
CISA KEVNot currently listed
Published2022-12-06
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Description
pdfmake is an open source client/server side PDF printing in pure JavaScript. In versions up to and including 0.2.5 pdfmake contains an unsafe evaluation of user controlled input. Users of pdfmake are thus subject to arbitrary code execution in the context of the process running the pdfmake code. There are no known fixes for this issue. Users are advised to restrict access to trusted user input.
Weakness classification
- security-advisories@github.com: CWE-94
- nvd@nist.gov: NVD-CWE-Other
Primary references
- security-advisories@github.com — Exploit, Third Party Advisory
- security-advisories@github.com — Exploit, Third Party Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Exploit, Third Party Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Exploit, Third Party Advisory