Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Security Advisory in pdf.js #107

Closed
laserhybiz opened this issue May 8, 2024 · 2 comments · Fixed by #111
Closed

Security Advisory in pdf.js #107

laserhybiz opened this issue May 8, 2024 · 2 comments · Fixed by #111

Comments

@laserhybiz
Copy link

Arbitrary JavaScript execution upon opening a malicious PDF

Additional context

  • vue-pdf: all versions
  • vue: all versions
@KSakowski
Copy link

I have the same problem and if I see correctly, there are critical security vulnerabilities in pdfjs-dist, right ?
Can we expect an update of this library to the latest version ?

KSakowski added a commit to KSakowski/vue-pdf that referenced this issue May 15, 2024
@KSakowski
Fix issue TaTo30#107 Custom pdfjs-dist build
235ccdf 
pdfjs-build from https://github.com/oskargargas/pdf.js/tree/v3.11.174
@TaTo30
Copy link
Owner

TaTo30 commented May 25, 2024

I'm already working for updating the library with the latest version of pdfjs, please be patient.

@TaTo30 TaTo30 mentioned this issue May 25, 2024
Merged
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging a pull request may close this issue.

Update pdfjs-dist to 4.2.67 TaTo30/vue-pdf
3 participants
@KSakowski @TaTo30 @laserhybiz