Skip to main content
Participant
February 20, 2023
Question

Vulnerabilities found in pdfservices node sdk v3.2.0

  • February 20, 2023
  • 0 replies
  • 235 views

Hello,

 

Our tool (NexusIQ) found 2 vulnerabilities from the dependencies used by @adobe/pdfservices-node-sdk : 3.2.0.

  1. move-file: 1.2.0 (recommendation is to upgrade to v2.1.0) - https://cwe.mitre.org/data/definitions/732.html
  2. component-type: 1.2.1 (parent dependency validate: 4.5.1) - https://cwe.mitre.org/data/definitions/1333.html

 

Our application is already in production and will block future deployments if not addressed because the pipeline will fail if it finds any vulnerability. Using the PublicAPI is our last option because it requires code refactoring. Please advise.

    This topic has been closed for replies.