HIGH8.8npm
GHSA-7jg2-jgv3-fmr4· CVE-2018-5158Malicious PDF can inject JavaScript into PDF Viewer
Modified: 5/28/2024
package
npm/pdfjs-dist
pkg:npm/pdfjs-dist
HIGHnpm
GHSA-hq66-cqwq-w95j· CVE-2026-16633PDF.js: Arbitrary JavaScript execution upon opening a malicious PDF
Modified: 9/10/2026
HIGH8.8npm
GHSA-wgrm-67xf-hhpq· CVE-2024-4367PDF.js vulnerable to arbitrary JavaScript execution upon opening a malicious PDF
Modified: 9/10/2026