Approved changes feed: RSS · Atom

cpe:2.3:a:node-pdf-generator_project:node-pdf-generator:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorNode Pdf Generator Project (31ef534e-5c5e-52f5-bee3-00f7579b9dea)
ProductNode Pdf Generator (cb3d8367-0c84-58ef-9f83-83aa88cd5db8)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/darrenhaken/node-pdf-generator purl2cpe 2026-06-01 10:13:24.786929
pkg:npm/node-pdf-generator purl2cpe 2026-06-01 10:13:24.786931

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-7740 vulnerable 2026-06-08 05:27:14.090264 Server-side Request Forgery (SSRF)
HIGH (8.2)
This affects all versions of package node-pdf-generator. Due to lack of user input validation and sanitization done to the content given to node-pdf-generator, it is possible for an attacker to craft a url that will be passed to an external server allowing an SSRF attack.
Published: 2020-10-06T16:40:13.357Z
Updated: 2024-09-17T03:52:44.294Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.