github_osv/GHSA-rhwx-hjx2-x4qr
PDFKit vulnerable to Command Injection
The package pdfkit is vulnerable to Command Injection where the URL is not properly sanitized.
Note: This issue was patched in 0.8.7.2, but the patch was discovered to be ineffective. The updated patch version is 0.8.7.2.
gitlab/gem/pdfkit/CVE-2022-25765
Improper Neutralization of Special Elements used in a Command ('Command Injection')
The package pdfkit from 0.0.0 is vulnerable to Command Injection where the URL is not properly sanitized.