{"id":"ROOT-APP-NPM-CVE-2024-4367","summary":"CVE-2024-4367 in pdfjs-dist - Patched by Root","details":"Root has patched CVE-2024-4367 in the pdfjs-dist package for Root:npm. Multiple fixed versions available.","modified":"2026-09-15T13:15:02.860764131Z","published":"2026-09-15T12:26:03Z","upstream":["CVE-2024-4367"],"database_specific":{"source":"Root","distro":"npm","distro_version":"","severity":"HIGH"},"affected":[{"package":{"name":"pdfjs-dist","ecosystem":"Root:npm"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.174-aikido.3"},{"fixed":"2.16.105-aikido.2"},{"fixed":"2.2.228-aikido.2"},{"fixed":"2.2.228-aikido.3"},{"fixed":"3.11.174-aikido.2"},{"fixed":"2.12.313-aikido.2"}]}],"database_specific":{"upstream_version":"2.16.105","all_fixed_versions":["3.11.174-aikido.3","2.16.105-aikido.2","2.2.228-aikido.2","2.2.228-aikido.3","3.11.174-aikido.2","2.12.313-aikido.2"],"source":"https://api.root.io/external/osv/ROOT-APP-NPM-CVE-2024-4367.json","root_patch_version":"aikido.2","root_patched":true,"total_fixed_versions":6}},{"package":{"name":"@rootio/pdfjs-dist","ecosystem":"Root:npm"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.0-root.io.1"},{"fixed":"3.11.0-root.io.1"},{"fixed":"2.12.0-root.io.1"},{"fixed":"3.11.174-root.io.3"},{"fixed":"2.16.105-root.io.2"},{"fixed":"2.2.228-root.io.2"},{"fixed":"2.2.228-root.io.3"},{"fixed":"3.11.174-root.io.2"},{"fixed":"2.12.313-root.io.2"}]}],"database_specific":{"all_fixed_versions":["2.2.0-root.io.1","3.11.0-root.io.1","2.12.0-root.io.1","3.11.174-root.io.3","2.16.105-root.io.2","2.2.228-root.io.2","2.2.228-root.io.3","3.11.174-root.io.2","2.12.313-root.io.2"],"source":"https://api.root.io/external/osv/ROOT-APP-NPM-CVE-2024-4367.json","root_patch_version":"root.io.2","root_patched":true,"total_fixed_versions":9,"upstream_version":"2.16.105"}}],"schema_version":"1.9.0"}