Fdawgs CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

MEDIUM Fdawgs CVE published 2026-08-25

CVE-2026-78637

CVE-2026-78637 is an argument injection vulnerability in Fdawgs node-poppler up to 9.1.2/10.0.1. The vulnerability affects the function pdfInfo/pdfToText/pdfToCairo/pdfToPpm/pdfImages/pdfToHtml/pdfToPs/pdfFonts/pdfDetach/pdfAttach/pdfSeparate/pdfUnite in src/index.js. The attack may be initiated remotely. A patch (db6e3f79d3beb20601be7e59669c39811ae3c330) is available.