hrynko/vue-pdf-embed

PDF.js Critical Vulnerability

AmmarMohamadIsmaeel opened this issue · 5 comments

AmmarMohamadIsmaeel commented

CVE-2024-4367: JavaScript Flaws Threaten Millions of PDF.js

Please update the pdf js to 4.2.67

hrynko commented

Hi @AmmarMohamadIsmaeel @leeobrum

Thanks for bringing this up, I'm on it

  • 👍6
asugai commented

@hrynko - any updates? Would love to push out updates for projects using this package. Thank you for all of the hard work!

  • 👍1
asugai commented

@hrynko I made a PR with at least a way to minimize the vulnerability until there is a larger updated - #217

hrynko commented

PDF.js has been updated to 4.3.136 in v2.0.4

  • 👍2
  • 🎉2
  • ❤️2