universalviewer
universalviewer copied to clipboard
Upgrade to [email protected] to mitigate vulnerability
UV version:
[email protected]
I'm submitting a:
- [x] bug report
- [ ] feature request => please use the user stories repo
- [ ] support request => Please do not submit support requests here, use stackoverflow
Current behavior:
Vulnerability description: CVE-2018-5158: Malicious PDF can inject JavaScript into PDF Viewer PDF Viewer will run code from PDF files, missing validation for /Domain and /Range parameters
Expected behavior:
Updated module
Steps to reproduce:
Related code:
// insert any relevant code here
Other information:
All issues will be triaged for further investigation or closure by the 28 September 2023. If your issue is still relevant and would like for it be investigated further please comment by 14 September 2023.
@edsilv, this seems worth doing and is hopefully not difficult.