CVE-2025-11362
Unknown Unknown - Not Provided
BaseFortify

Publication date: 2025-10-07

Last updated on: 2025-10-20

Assigner: Snyk

Description
Versions of the package pdfmake before 0.3.0-beta.17 are vulnerable to Allocation of Resources Without Limits or Throttling via repeatedly redirect URL in file embedding. An attacker can cause the application to crash or become unresponsive by providing crafted input that triggers this condition.
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2025-10-07
Last Modified
2025-10-20
Generated
2026-05-07
AI Q&A
2025-10-07
EPSS Evaluated
2026-05-05
NVD
Affected Vendors & Products
Showing 16 associated CPEs
Vendor Product Version / Range
pdfmake pdfmake 0.3.0
pdfmake pdfmake 0.3.0
pdfmake pdfmake 0.3.0
pdfmake pdfmake 0.3.0
pdfmake pdfmake 0.3.0
pdfmake pdfmake 0.3.0
pdfmake pdfmake 0.3.0
pdfmake pdfmake 0.3.0
pdfmake pdfmake 0.3.0
pdfmake pdfmake 0.3.0
pdfmake pdfmake 0.3.0
pdfmake pdfmake 0.3.0
pdfmake pdfmake 0.3.0
pdfmake pdfmake 0.3.0
pdfmake pdfmake 0.3.0
pdfmake pdfmake 0.3.0
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-770 The product allocates a reusable resource or group of resources on behalf of an actor without imposing any intended restrictions on the size or number of resources that can be allocated.
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?

This vulnerability affects versions of the pdfmake package before 0.3.0-beta.17. It involves allocation of resources without limits or throttling through repeatedly redirecting URLs in file embedding. An attacker can exploit this by providing crafted input that causes the application to crash or become unresponsive.


How can this vulnerability impact me? :

The vulnerability can cause the affected application to crash or become unresponsive, potentially leading to denial of service conditions.


Ask Our AI Assistant
Need more information? Ask your question to get an AI reply (Powered by our expertise)
0/70
EPSS Chart