Skip to content

[BUG] Dependency package PDF.js vulnerability CVE-2024-4367 #1478

@kitshinghk-crypto

Description

@kitshinghk-crypto
Overview of the issue

One of the compodoc dependencies, PDF.js, is reported to have a high serverity vulnerability CVE-2024-4367.

Suggest a Fix

Upgrade the version of PDF.js to version 4.2.67 or configure isEvalSupported to false

Metadata

Metadata

Assignees

Labels

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions