Security Advisory in pdf.js

TaTo30 / vue-pdf

PDF component for Vue 3

https://tato30.github.io/vue-pdf/

MIT License

347 stars 51 forks source link

Security Advisory in pdf.js #107

Closed laserhybiz closed 1 month ago

laserhybiz commented 2 months ago

Arbitrary JavaScript execution upon opening a malicious PDF

Additional context

vue-pdf: all versions
vue: all versions

KSakowski commented 1 month ago

I have the same problem and if I see correctly, there are critical security vulnerabilities in pdfjs-dist, right ? Can we expect an update of this library to the latest version ?

TaTo30 commented 1 month ago

I'm already working for updating the library with the latest version of pdfjs, please be patient.