Skip to content

Product

npm html-pdf vulnerabilities

1 published CVE affecting npm html-pdf, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
1
Critical
0
High
1
Medium
0
Low
0
Unscored
0
CISA KEV
0

Latest npm html-pdf CVEs

Newest publication first

  1. CVE-2019-15138 Arbitrary File Read in html-pdf

    Published
    HighCVSS 7.5 EPSS 1.8%

    The html-pdf package 2.2.0 for Node.js has an arbitrary file read vulnerability via an HTML file that uses XMLHttpRequest to access a file:/// URL.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.