Advisory Weakness Curation

Command Injection in pdfinfojs Versions of `pdfinfojs` before 0.4.1 are vulnerable to command injection. This is exploitable if an attacker can control the filename parameter that is passed into the `pdfinfojs` constructor. ## Recommendation Update to version 0.4.1 or later.

OS Command Injection pdfinfojs has a command injection vulnerability that allows an attacker to execute arbitrary commands on the victim's machine.