md-to-pdf vulnerabilities (npm)

2 vulnerabilities.

• md-to-pdf npm md-to-pdf is vulnerable to arbitrary JavaScript code execution when parsing front matter CVE-2025-65108 Fix available 10.0 CriticalNovember 20, 2025
• md-to-pdf npm Remote Code Execution (RCE) CVE-2021-23639 Public exploitFix available 9.8 CriticalDecember 10, 2021