GHSA-9p64-h5q4-phpm
Remote Code Execution in office-converter
All versions of office-converter are vulnerable to Remote Code Execution. Due to insufficient input validation an attacker could run arbitrary commands on the server thus rendering the package vulnerable to Remote Code Execution.
Recommendation
No fix is currently available. Consider using an alternative module until a fix is made available.
What each source reports
GitHub AdvisoriesNo score
Remote Code Execution in office-converter
All versions of office-converter are vulnerable to Remote Code Execution. Due to insufficient input validation an attacker could run arbitrary commands on the server thus rendering the package vulnerable to Remote Code Execution.
Recommendation
No fix is currently available. Consider using an alternative module until a fix is made available.
- Record
GHSA-9p64-h5q4-phpm- Weakness
- CWE-20
- Updated
- 2026-11-02
OSVNo score
Remote Code Execution in office-converter
All versions of office-converter are vulnerable to Remote Code Execution. Due to insufficient input validation an attacker could run arbitrary commands on the server thus rendering the package vulnerable to Remote Code Execution.
Recommendation
No fix is currently available. Consider using an alternative module until a fix is made available.
- Record
GHSA-9p64-h5q4-phpm- Weakness
- CWE-20
- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
office-converternpm | 0.0.0 and later | None known |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | GitHub Advisories, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
GHSA-9p64-h5q4-phpm is a vulnerability with no CVSS score yet in office-converter, published September 2, 2020. No source lists public exploit code. No source names a fixed version.