7.3
High
CVE-2022-25765 The package pdfkit from 0.0.0 are vulnerable to Command Injection where the URL is not properly sanitized
Description
The package pdfkit from 0.0.0 are vulnerable to Command Injection where the URL is not properly sanitized.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| pdfkit 0.0 | 0.0.0 → latest | No fix stated |