pdfjs-dist vulnerabilities (npm)

3 vulnerabilities.

• pdfjs-dist npm PDF.js: Arbitrary JavaScript execution upon opening a malicious PDF CVE-2026-16633 Fix available 8.6 HighAugust 6, 2026
• pdfjs-dist npm PDF.js vulnerable to arbitrary JavaScript execution upon opening a malicious PDF CVE-2024-4367 Public exploitFix available EPSS 70.7% 8.8 HighMay 7, 2024
• pdfjs-dist npm Malicious PDF can inject JavaScript into PDF Viewer CVE-2018-5158 Public exploitFix available EPSS 10.3% 8.8 HighMay 10, 2018