CVE-2025-11362

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2025-11362
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-11362.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2025-11362
Aliases
Downstream
Related
Published
2025-10-07T05:00:04.959Z
Modified
2026-08-12T03:51:26.842811249Z
Severity
  • 8.7 (High) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N CVSS Calculator
Summary
[none]
Details

Versions of the package pdfmake from 0.3.0-beta.1 and before 0.3.0-beta.17 are vulnerable to Allocation of Resources Without Limits or Throttling via repeatedly redirect URL in file embedding. An attacker can cause the application to crash or become unresponsive by providing crafted input that triggers this condition.

Database specific 
{
    "cwe_ids": [
        "CWE-770"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/11xxx/CVE-2025-11362.json",
    "cna_assigner": "snyk"
}
References

Affected packages

Git / github.com/bpampuch/pdfmake

Affected ranges

Type
GIT
Repo
https://github.com/bpampuch/pdfmake
Events
Introduced
bfd1f739e9e59ddb922197323fdf0edf7064aa56
Fixed
3110ef2a567cf4e7b02d98c5766e956a8d8a9796
Fixed
064a1da3d9f5c66188e000fb76d3ae810cee43d4
Database specific
Show details 
{
    "source": "AFFECTED_FIELD",
    "extracted_events": [
        {
            "introduced": "0.3.0-beta.1"
        },
        {
            "fixed": "0.3.0-beta.17"
        },
        {
            "fixed": "0.3.0-beta.18"
        }
    ]
}

Affected versions

0.*
0.3.0-beta.1
0.3.0-beta.10
0.3.0-beta.11
0.3.0-beta.12
0.3.0-beta.13
0.3.0-beta.14
0.3.0-beta.15
0.3.0-beta.16
0.3.0-beta.17
0.3.0-beta.2
0.3.0-beta.3
0.3.0-beta.4
0.3.0-beta.5
0.3.0-beta.6
0.3.0-beta.7
0.3.0-beta.8
0.3.0-beta.9

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-11362.json"