Vulnerability Database

299,038

Total vulnerabilities in the database

CVE-2025-11362

Versions of the package pdfmake before 0.3.0-beta.17 are vulnerable to Allocation of Resources Without Limits or Throttling via repeatedly redirect URL in file embedding. An attacker can cause the application to crash or become unresponsive by providing crafted input that triggers this condition.

Published: Oct 7, 2025
Updated: Oct 8, 2025
CVE: CVE-2025-11362
GHSA: GHSA-rj3r-r7hh-jxfq
Severity: High
Exploit:

CVSS v3:

Severity: Unknown
Score:
AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWEs:

CWE-770

Affected Software
References

Software	From	Fixed in
pdfmake	0.3.0-beta.1	0.3.0-beta.17

https://github.com/bpampuch/pdfmake/commit/741169634bf07730e010cd77477b6cc038e846ed
https://github.com/bpampuch/pdfmake/issues/2886
https://security.snyk.io/vuln/SNYK-JS-PDFMAKE-10223297

Deep Security Visibility Without the Complexity

SynScan provides clear, real-time security insights so you can monitor your attack surface, spot risks early, and act fast—without extra complexity.

No setup fees
5-min deployment
Cancel anytime

Book a Demo