pdfjs-dist

Generic build of Mozilla's PDF.js library.

Latest 6.4.299

NPM

95%

Total Score

healthy

Healthy: actively maintained Mozilla project with frequent releases, broad contributors, and verified publishing.

Are you affected? Scan for Free

Health Score Breakdown

Maintainers

Most publishing accounts use the Mozilla domain and the organization-backed project has active repository contributors. brendandahl (gmail.com) is an outside-domain publishing account, creating a minor account-hygiene concern rather than evidence of weak maintenance capacity.

Vulnerabilities

Title	Versions	Severity
AIKIDO-2026-169371 Pre-CVE Found by Aikido Intel before public disclosure or CVE publication. pdfjs-dist is vulnerable to Improper Input Validation in versions 0.0.1 - 6.2.108.	0.0.1 - 6.2.108	High
AIKIDO-2026-199171 pdfjs-dist is vulnerable to Cross-Site Scripting (XSS) in versions 5.6.83 - 6.1.200.	5.6.83 - 6.1.200	High
CVE-2024-4367 pdfjs-dist is vulnerable to Improper Check for Unusual or Exceptional Conditions in versions 0.0.0 - 4.1.392.	0.0.0 - 4.1.392	High
CVE-2018-5158 pdfjs-dist is vulnerable to Improper Control of Generation of Code ('Code Injection') in versions 2.0.0 - 2.0.550 and 0.0.0 - 1.10.100.	0.0.0 - 1.10.1002.0.0 - 2.0.550	High