CVE-2022-25765: Fedoraproject Fedora

Critical severity, CVSS 9.8. EPSS: 41.6% chance of exploitation in the next 30 days.

The package pdfkit from 0.0.0 are vulnerable to Command Injection where the URL is not properly sanitized.

Affected products

• Fedoraproject Fedora: version 35 only; version 36 only; version 37 only
• Pdfkit Project Pdfkit: from 0.0.0

Published 2022-09-09. Last modified 2026-06-17.