| Titre | GitHub grey before 5.0.0 Execution with Unnecessary Privileges |
|---|
| Description | The library gray-matter (used by md-to-pdf to parse front matter) exposes a JS-engine by default, which essentially runs eval on the given Markdown. |
|---|
| La source | ⚠️ https://github.com/simonhaenisch/md-to-pdf/issues/99 |
|---|
| Utilisateur | LamentXU (UID 78142) |
|---|
| Soumission | 07/06/2025 13:34 (il y a 1 Année) |
|---|
| Modérer | 10/06/2025 13:42 (3 days later) |
|---|
| Statut | Dupliqué |
|---|
| Entrée VulDB | 187945 [md-to-pdf jusqu’à 4.x gray-matter Exécution de code à distance] |
|---|
| Points | 0 |
|---|