Description

This affects the package jsreport-chrome-pdf before 1.10.0.

Remediation

References

https://github.com/jsreport/jsreport-chrome-pdf/commit/6750b2f77d05cb843aefc1c4a98097a3bd33a6a2

https://snyk.io/vuln/SNYK-JS-JSREPORTCHROMEPDF-1037310

Related Vulnerabilities

CVE-2022-43420 Vulnerability in maven package org.jenkins-ci.plugins:contrast-continuous-application-security

CVE-2021-21341 Vulnerability in maven package com.thoughtworks.xstream:xstream

CVE-2018-5653 Vulnerability in maven package org.apache.cayenne.modeler:cayenne-modeler

CVE-2023-47440 Vulnerability in npm package gladys

CVE-2022-41642 Vulnerability in npm package nadesiko3

Severity

High

Classification

CWE-22 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Tags

Third Party Advisory Exploit