CVE-2022-36231: Newspaperclub PDF Info

Critical severity, CVSS 9.8. EPSS: 3% chance of exploitation in the next 30 days.

pdf_info 0.5.3 is vulnerable to Command Execution because the Ruby code uses backticks instead of Open3.

Affected products

• Newspaperclub PDF Info: version 0.5.3 only

Published 2023-02-23. Last modified 2026-06-17.