Tag

cve-2024-4367

Safeguard articles tagged "cve-2024-4367" — guides, analysis, and best practices for software supply chain and application security.

1 article

Open Source

pdfjs-dist on npm: Security Review and Safe Usage

The pdfjs-dist npm package renders PDFs in the browser, but CVE-2024-4367 allowed arbitrary JavaScript execution from a malicious PDF before 4.2.67. Here is what to check.

May 22, 20255 min read