D
Vendor security profile
dfm
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs1
Critical0
CISA KEV0
Public exploit0
Patch rate%0
Avg. CVSS6.9
12-month vulnerability rate
0
0
0
0
0
0
0
0
0
0
0
1
CVE KEV
CVE severity distribution
1toplam CVE
Medium1 (100%)
Patch and exploitation view
%0
Verified patch
%0
CISA KEV
%0
Public exploit
0Patch available
0Partial
0Workaround
0Vendor: no patch
1Unknown
Latest vulnerabilities
5.3
CVE-2026-82868@pdfme/schemas before 5.5.9 Cross-Site Scripting via SVG
Patch status unknownEPSS %0
5.3
CVE-2026-82867@pdfme/schemas before 5.5.9 Cross-Site Scripting via Select
Patch status unknownEPSS %0
8.9
CVE-2026-82866@pdfme/common before 5.5.10 SSRF via Unvalidated URL Fetch
Patch status unknownEPSS %0
2.1
CVE-2026-82865pdfme schemas before 5.5.10 Cross-Site Scripting via i18n Label
Patch status unknownEPSS %0
7.1
CVE-2026-82864pdfme pdf-lib before 5.5.10 Denial of Service via Decompression Bomb
Patch status unknownEPSS %0
7.5
CVE-2025-11362Resource allocation without limits in N/a Pdfmake
Patch verifiedEPSS %0