pdfmake Allocation of Resources Without Limits Vulnerability Leading to Denial-of-Service

A denial-of-service vulnerability has been identified in the pdfmake package, specifically in versions prior to 0.3.0-beta.17. This issue arises from a lack of proper throttling, allowing an attacker to cause the application to crash or become unresponsive. The vulnerability can be exploited by embedding files with URLs that redirect repeatedly, overwhelming the application's resource handling.

Impact

Exploitation of this vulnerability can cause the application to crash or become unresponsive, leading to a denial-of-service condition.

Remediation

Users are advised to upgrade pdfmake to version 0.3.0-beta.17 or higher.