VDB
CVE-2026-16633
CVE-2026-16633
PUBLISHED
CVSS 8.100000381469727 HIGH
PDF.js: Arbitrary JavaScript execution upon opening a malicious PDF
Risk Scores
CVSS 3.1
8.100000381469727
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| chainguard | librechat | 0, 0, 0 |
| npm | pdfjs-dist | 5.6.83 |
Timeline
- Aug 6, 2026 CVE Published
- Aug 13, 2026 Security Advisory