← Database

CVE-2025-26240

HIGH CVSS: 8.4 Published: 2026-06-17 Modified: 2026-06-22

Description

In JazzCore python-pdfkit 1.0.0, the from_string method enables the execution of JavaScript code within the context of the server application and the exfiltration of local files.

Affected Platforms

Unknown

Weakness Type

CWE-120

References