Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2025-11362
7.5
HIGHCVSS v3
Severity scale
010
Description
Versions of the package pdfmake before 0.3.0-beta.17 are vulnerable to Allocation of Resources Without Limits or Throttling via repeatedly redirect URL in file embedding. An attacker can cause the application to crash or become unresponsive by providing crafted input that triggers this condition.
pdfmake
NPMClient/server side PDF printing in pure JavaScript
NPMClient/server side PDF printing in pure JavaScript= 0.3.0, >= 0.3.0-beta.1, < 0.3.0-beta.17NVD
bpampuch/pdfmake
GitHubClient/server side PDF printing in pure JavaScript
GitHubClient/server side PDF printing in pure JavaScript= 0.3.0, >= 0.3.0-beta.1, < 0.3.0-beta.17NVD