Staging Environment: Content and features may be unstable or change without notice.

Advisory Weakness Curation

CVE-2022-25765

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-rhwx-hjx2-x4qr

PDFKit vulnerable to Command Injection The package pdfkit is vulnerable to Command Injection where the URL is not properly sanitized. Note: This issue was patched in 0.8.7.2, but the patch was discovered to be ineffective. The updated patch version is 0.8.7.2.

gitlab/gem/pdfkit/CVE-2022-25765

Improper Neutralization of Special Elements used in a Command ('Command Injection') The package pdfkit from 0.0.0 is vulnerable to Command Injection where the URL is not properly sanitized.