BleepingComputer

Critical jsPDF flaw lets hackers steal secrets via generated PDFs

The jsPDF library for generating PDF documents in JavaScript applications is vulnerable to a critical vulnerability that allows an attacker to steal sensitive data from the local filesystem by ...
ZDNet

Adobe: Turn off JavaScript in PDF Reader

In response to confirmed reports of a zero-day vulnerability in its PDF Reader software, Adobe today urged users on all platforms to disable JavaScript as a temporary measure to avoid code execution ...

The official n8n Docker image has lacked PDF bindings since 2.43.2—yet 1-page text PDFs were still readable (Measured Issue 41242 with 5 tags)

Issue 41242 was opened on the n8n GitHub, reporting that in the official Docker image 2.43.3, all nodes handling PDFs fail with 'DOMMatrix is not defined'. The reporter's environment uses an external ...
Help Net Security

Acrobat Reader zero-day exploited in the wild for many months (CVE-2026-34621)

Unknown attackers have exploited a zero-day Adobe Acrobat Reader vulnerability since November 2025 and possibly even earlier, security researcher Haifei Li has discovered. Haifei Li is one of the ...