CRITICAL10.0npm
GHSA-547r-qmjm-8hvw· CVE-2025-65108md-to-pdf vulnerable to arbitrary JavaScript code execution when parsing front matter
Modified: 11/25/2025
package
pkg:npm/md-to-pdf
md-to-pdf vulnerable to arbitrary JavaScript code execution when parsing front matter
Modified: 11/25/2025
Code Injection in md-to-pdf.
Modified: 7/8/2026