CVE-2022-25765
Critical · 9.8CVSS
9.8
EPSS
41.6%
Published
Sep 9, 2022
CISA due date
—
The record
The package pdfkit from 0.0.0 are vulnerable to Command Injection where the URL is not properly sanitized.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| RubyGems | pdfkit | 0 | 0.8.7.2 |
| gem | pdfkit | 0.0.0 | No fix |