Jsreport: Security Vulnerabilities
Code Injection in GitHub repository jsreport/jsreport prior to 3.11.3.
CVSS Score
10.0
EPSS Score
0.001
Published
2023-05-08
This affects the package phantom-html-to-pdf before 0.6.1.
CVSS Score
7.5
EPSS Score
0.004
Published
2020-11-05
This affects the package jsreport-chrome-pdf before 1.10.0.
CVSS Score
6.5
EPSS Score
0.003
Published
2020-11-05
An unintended require and server-side request forgery vulnerabilities in jsreport version 2.5.0 and earlier allow attackers to execute arbitrary code.
CVSS Score
9.8
EPSS Score
0.004
Published
2020-02-14