CVE-2020-7740: Node-PDF-Generator Project Node-PDF-Generator

High severity, CVSS 8.2. EPSS: 2% chance of exploitation in the next 30 days.

This affects all versions of package node-pdf-generator. Due to lack of user input validation and sanitization done to the content given to node-pdf-generator, it is possible for an attacker to craft a url that will be passed to an external server allowing an SSRF attack.

Affected products

• Node-PDF-Generator Project Node-PDF-Generator: any version

Published 2020-10-06. Last modified 2026-06-17.