CVE-2025-11362
HighCVSS 7.5Exploitation Probability (EPSS)
Low risk26th percentile - higher than 26% of all known CVEs
Summary
Versions of the package pdfmake from 0.3.0-beta.1 and before 0.3.0-beta.17 are vulnerable to Allocation of Resources Without Limits or Throttling via repeatedly redirect URL in file embedding. An attacker can cause the application to crash or become unresponsive by providing crafted input.
Risk Assessment
Risk of application crash or unresponsiveness (DoS) through exploitation, potentially leading to service disruption.
Recommendation
Upgrade the pdfmake package to version 0.3.0-beta.17 or later, which fixes this vulnerability.
Other vulnerabilities in pdfmake
Original NVD description (English source)
Versions of the package pdfmake from 0.3.0-beta.1 and before 0.3.0-beta.17 are vulnerable to Allocation of Resources Without Limits or Throttling via repeatedly redirect URL in file embedding. An attacker can cause the application to crash or become unresponsive by providing crafted input that triggers this condition.