CVE-2025-51591
A Server-Side Request Forgery (SSRF) in JGM Pandoc v3.6.4 allows attackers to gain access to and compromise the whole infrastructure via injecting a crafted iframe.
No affected software listed.
- http://jgm.com
- http://pandoc.com
- https://github.com/jgm/pandoc/commit/67edf7ce7cd3563a180ae44bd122b012e22364f8
- https://github.com/jgm/pandoc/issues/10682
- https://github.com/RealestName/Vulnerability-Research/tree/main/CVE-2025-51591
- https://pandoc.org
- https://www.wiz.io/blog/imds-anomaly-hunting-zero-day
- not-applicable:http://jgm.com/
- not-applicable:http://pandoc.com/
Deep Security Visibility Without the Complexity
SynScan provides clear, real-time security insights so you can monitor your attack surface, spot risks early, and act fast—without extra complexity.
- No setup fees
- 5-min deployment
- Cancel anytime