Vulnerabilities / PDF.js
PDF.js vulnerabilities
Advisories WPSec published for PDF.js Viewer. Other sources may list more. Its attack surface: PDF.js on WPSec AttackSurface.
| Published | ID | Vulnerability | Severity | Fixed in |
|---|---|---|---|---|
| 2026-10-27 | WPSEC-2026-1686 | PDF.js <= 3.1.1 - Unauthenticated Server-Side Request Forgery via PDF Proxy | High 7.2 | 3.2.0 |
License: CC BY 4.0