Staging Environment: Content and features may be unstable or change without notice.

Advisory Weakness Curation

CVE-2021-23639

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-x949-7cm6-fm6p

Code Injection in md-to-pdf. The package md-to-pdf before 5.0.0 are vulnerable to Remote Code Execution (RCE) due to utilizing the library gray-matter to parse front matter content, without disabling the JS engine.

gitlab/npm/markdown_to_pdf/CVE-2021-23639

Improper Control of Generation of Code ('Code Injection') The package md-to-pdf is vulnerable to Remote Code Execution (RCE) due to utilizing the library gray-matter to parse front matter content, without disabling the JS engine.

gitlab/npm/md-to-pdf/CVE-2021-23639

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') The package md-to-pdf are vulnerable to Remote Code Execution (RCE) due to utilizing the library gray-matter to parse front matter content, without disabling the JS engine.