Server-Side Request Forgery in html-pdf-chrome

Description

This package is working as intended. A Security section has been added since v0.6.1 to detail proper usage of this library. Npm has revoked their advisory altogether.

Recommendation

Update the html-pdf-chrome package to the latest compatible version. Followings are version details:

• Affected version(s): < 0.6.1
• Patched version(s): 0.6.1

References

• GHSA-5p98-wpc9-g498
• www.npmjs.com
• CWE-918
• OWASP 2021-A10

Related Issues

• Nu Html Checker (vnu) contains a Server-Side Request Forgery (SSRF) vulnerability - CVE-2025-15104
• Server side request forgery in SwaggerUI (GHSA-qrmm-w75w-3wpx) - Vulnerability
• @lobehub/chat Server Side Request Forgery vulnerability - CVE-2024-32965
• google-translate-api-browser Server-Side Request Forgery (SSRF) Vulnerability - CVE-2023-48711

Tags:

npm

html-pdf-chrome