Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 1

Export CSV
CVE-2025-26240

Python-pdfkit from_string Method Allows Server-Side JavaScript Execution and Local File Exfiltration

In JazzCore python-pdfkit 1.0.0, the from_string method enables the execution of JavaScript code within the context of the server application and the exfiltration of local files.

CVSS 3.1 · 8.4 High EPSS < 1% KEV · Not listed
Vendors
Jazzcore
Products
Python-pdfkit