CVE-2019-15138
The html-pdf package 2.2.0 for Node.js has an arbitrary file read vulnerability via an HTML file that uses XMLHttpRequest to access a file:/// URL.
CVSS 3.1 · 7.5 High
EPSS 1.8%
KEV · Not listed
Vendors
Products