wojtekmaj / react-pdf

Display PDFs in your React app as easily as if they were images.
https://projects.wojtekmaj.pl/react-pdf
MIT License
9.34k stars 882 forks source link

Are you planning on release a version to use the patched version of pdfjs-dist? #1794

Closed shye0000 closed 4 months ago

shye0000 commented 4 months ago

Before you start - checklist

Description

HI, In my project, we have the npm audit check on CI, which currently fail on pdfjs-dist vulnerability: https://github.com/advisories/GHSA-wgrm-67xf-hhpq and by installing the patched versions of react-pdf doesn't fix that, because you've patched it by disable the "eval support" in your code, but still installing the unpatched verison of pdfjs-dist which is still a high vulnerability for npm audit.

So as the title, are you planning on releasing a new version to install the patched version of pdfjs-dist in the near future, please? thx a lot in advance.

Proposed solution

No response

Alternatives

No response

Additional information

No response

wojtekmaj commented 4 months ago

Already covered both in Issues and Discussions