Skip to content

CVE-2018-3757

CVE-2018-3757

This page contains facts from public vulnerability sources. Check the original advisory before updating.

Command injection exists in pdf-image v2.0.0 due to an unescaped string parameter.

CVSS 9.8 · Critical · EPSS 4.6% · Fix available

Published: 2018-06-01T19:00:00.000Z
Updated: 2024-09-16T22:44:55.392Z

Stack: node

Affected products and versions

n/a
Versions
- n/a: Affected
No fix published
pdf-image npm
Affected ranges
- SEMVER: < 2.0.0
Update to 2.0.0

Original sources

Check your server →