Security Advisory in pdf.js

TaTo30 / vue-pdf

PDF component for Vue 3

https://tato30.github.io/vue-pdf/

MIT License

472 stars 65 forks source link

Security Advisory in pdf.js #107

Closed laserhybiz closed 6 months ago

laserhybiz commented 6 months ago

Arbitrary JavaScript execution upon opening a malicious PDF

Additional context

vue-pdf: all versions
vue: all versions

KSakowski commented 6 months ago

I have the same problem and if I see correctly, there are critical security vulnerabilities in pdfjs-dist, right ? Can we expect an update of this library to the latest version ?

TaTo30 commented 6 months ago

I'm already working for updating the library with the latest version of pdfjs, please be patient.