Pandoc

Pandoc

2 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
6.3

CVE-2023-38745

  • EPSS 0.02%
  • Published 25.07.2023 04:15:10
  • Last modified 21.11.2024 08:14:09

Pandoc before 3.1.6 allows arbitrary file write: this can be triggered by providing a crafted image element in the input when generating files via the --extract-media option or outputting to PDF format. This allows an attacker to create or overwrite ...

5

CVE-2023-35936

Exploit
  • EPSS 0.03%
  • Published 05.07.2023 21:15:09
  • Last modified 13.02.2025 17:16:40

Pandoc is a Haskell library for converting from one markup format to another, and a command-line tool that uses this library. Starting in version 1.13 and prior to version 3.1.4, Pandoc is susceptible to an arbitrary file write vulnerability, which c...