Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:npm/pdfinfojs@0.4.1
purl pkg:npm/pdfinfojs@0.4.1
Vulnerabilities affecting this package (0)
Vulnerability Summary Fixed by
This package is not known to be affected by vulnerabilities.
Vulnerabilities fixed by this package (1)
Vulnerability Summary Aliases
VCID-pdd6-ss5k-v3dj pdfinfojs command injection The pdfinfojs NPM module has a command injection vulnerability that allows an attacker execute arbitrary commands on the victim's machine. CVE-2018-3746
GHSA-3pxp-6963-46r9

Date Actor Action Vulnerability Source VulnerableCode Version
2026-06-04T17:40:54.356602+00:00 GithubOSV Importer Fixing VCID-pdd6-ss5k-v3dj https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2018/06/GHSA-3pxp-6963-46r9/GHSA-3pxp-6963-46r9.json 38.6.0
2026-06-02T03:45:04.529922+00:00 Npm Importer Fixing VCID-pdd6-ss5k-v3dj https://github.com/nodejs/security-wg/blob/main/vuln/npm/412.json 38.6.0