vworld4u CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

CRITICAL vworld4u CVE published 2026-10-14

CVE-2020-37282

The office-converter through 1.0.2 contains an OS command injection vulnerability that allows attackers to execute commands by supplying a crafted fileName to generatePdf() or generateHtml(). This vulnerability is classified as critical with a CVSS score of 9.3. Defenders responsible for office-converter deployments should assess exposure and prioritize remediation. The vulnerability allows attackers to e [truncated]