Codean Labs Blog

Every quarter we review your code and setup, not scanners, a manual deep dive by analysts who actually read and understand your code and product.

Popular posts: 1
Total points: 207
HN comments: 102
Rank: #5,928 company

Visit codeanlabs.com → RSS feedOn Hacker News May 2024 – May 2024

Web & Frontend 1 Security & Privacy 1

Most points Most discussed Most cited Newest

CVE-2024-4367 – Arbitrary JavaScript execution in PDF.js

2024207 points102 comments Security & Privacy details

A vulnerability in PDF.js found by Codean Labs. PDF.js is a JavaScript-based PDF viewer maintained by Mozilla. This bug allows an attacker to execute arbitrary JavaScript code as soon as a malicious PDF file is opened. This affects all Firefox users (