Approved changes feed: RSS · Atom
cpe:2.3:a:simonhaenisch:md-to-pdf:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Simonhaenisch (835f3e34-e011-5994-baac-88ee845ed2f7) |
|---|---|
| Product | Md To Pdf (e8c9c442-b9e9-535b-aa0e-b4beb4a6ba6c) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-65108 |
vulnerable | 2026-06-08 07:39:20.719993 |
md-to-pdf is vulnerable to arbitrary JavaScript code execution when parsing front matter
CRITICAL (10)
md-to-pdf is a CLI tool for converting Markdown files to PDF using Node.js and headless Chrome. Prior to version 5.2.5, a Markdown front-matter block that contains JavaScript delimiter causes the JS engine in gray-matter library to execute arbitrary code in the Markdown to PDF converter process of md-to-pdf library, resulting in remote code execution. This issue has been patched in version 5.2.5.
Published: 2025-11-21T21:52:02.729Z
Updated: 2025-11-24T17:17:08.879Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.