Pdfmake Project Pdfmake 0.2.9

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:pdfmake_project:pdfmake:0.2.9:*:*:*:*:*:*:*

part: a version: 0.2.9 update: *

VendorPdfmake Project (8b98806e-e73c-5e00-ae70-692e60a3aefe)
ProductPdfmake (5c21f7eb-1e95-5f01-9369-4d06b2afe3c5)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/bpampuch/pdfmake purl2cpe 2026-06-01 10:14:44.048624
pkg:maven/org.webjars.bower/pdfmake purl2cpe 2026-06-01 10:14:44.048626
pkg:npm/pdfmake purl2cpe 2026-06-01 10:14:44.048627
pkg:sourceforge/pdfmake.mirror purl2cpe 2026-06-01 10:14:44.048629

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-25180 vulnerable 2026-06-08 06:31:22.584298 Details available
An issue discovered in pdfmake 0.2.9 allows remote attackers to run arbitrary code via crafted POST request to the /pdf endpoint. NOTE: this is disputed because the behavior of the /pdf endpoint is intentional. The /pdf endpoint is only available after installing a test framework (that lives outside of the pdfmake applicaton). Anyone installing this is responsible for ensuring that it is only available to authorized testers.
Published: 2024-02-29T00:00:00.000Z
Updated: 2024-08-26T19:31:26.533Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.