MEDIUM6.1npm
GHSA-87v3-4cfp-cm76· CVE-2026-82868Cross-Site Scripting (XSS) via SVG Schema innerHTML Injection in @pdfme/schemas
Modified: 9/1/2026
package
npm/@pdfme/schemas
pkg:npm/%40pdfme/schemas
MEDIUM6.1npm
GHSA-qq9g-96v4-m3cj· CVE-2026-82867Cross-Site Scripting (XSS) via Select Schema Option Value Injection in @pdfme/schemas
Modified: 9/1/2026
MEDIUM4.4npm
GHSA-xgx4-2wgv-4jhm· CVE-2026-82865PDFME has XSS via Unsanitized i18n Label Injection into innerHTML in multiVariableText propPanel
Modified: 9/1/2026