Description
The pdfinfojs NPM module versions <= 0.3.6 has a command injection vulnerability that allows an attacker to execute arbitrary commands on the victim's machine.
Remediation
References
https://hackerone.com/reports/330957
Related Vulnerabilities
CVE-2022-24377 Vulnerability in npm package cycle-import-check
CVE-2020-36629 Vulnerability in npm package httpster
CVE-2022-24719 Vulnerability in npm package fluture-node
CVE-2023-36479 Vulnerability in maven package org.eclipse.jetty.ee9:jetty-ee9-servlets
CVE-2018-14732 Vulnerability in npm package webpack-dev-server