CRITICAL10.0npm
GHSA-547r-qmjm-8hvw· CVE-2025-65108md-to-pdf vulnerable to arbitrary JavaScript code execution when parsing front matter
Modified: 11/25/2025
package
npm/md-to-pdf
pkg:npm/md-to-pdf
CRITICAL9.8npm
GHSA-x949-7cm6-fm6p· CVE-2021-23639, SNYK-JS-MDTOPDF-1657880Code Injection in md-to-pdf.
Modified: 7/8/2026