CVE-2025-53626
pdfme has Sandbox Escape and Prototype Pollution vulnerabilities in pdfme expression evaluation
概要
pdfme has Sandbox Escape and Prototype Pollution vulnerabilities in pdfme expression evaluation
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
pdfme is a TypeScript-based PDF generator and React-based UI. The expression evaluation feature in pdfme 5.2.0 to 5.4.0 contains critical vulnerabilities allowing sandbox escape leading to XSS and prototype pollution attacks. This vulnerability is fixed in 5.4.1.
出典: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
参照URL
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- patch github.com