Root has patched AIKIDO-2026-169371 in the pdfjs-dist package for Root:npm. Multiple fixed versions available.
{
"distro": "npm",
"distro_version": "",
"severity": "HIGH",
"source": "Root"
}[
"4.10.38-aikido.1",
"2.16.105-aikido.1",
"4.8.69-aikido.1",
"3.11.174-aikido.3",
"2.16.105-aikido.2",
"5.4.296-aikido.1"
]
"aikido.1"
true
"https://api.root.io/external/osv/ROOT-APP-NPM-AIKIDO-2026-169371.json"
6
"4.10.38"
[
"4.10.38-root.io.1",
"2.16.105-root.io.1",
"4.8.69-root.io.1",
"3.11.174-root.io.3",
"2.16.105-root.io.2",
"5.4.296-root.io.1"
]
"root.io.1"
true
"https://api.root.io/external/osv/ROOT-APP-NPM-AIKIDO-2026-169371.json"
6
"4.10.38"