Browse all 10 CVE security advisories affecting Soda PDF. AI-powered Chinese analysis, POCs, and references for each vulnerability.
Soda PDF is a document management solution primarily used for creating, editing, and converting PDF files. Historically, the application has been vulnerable to multiple remote code execution (RCE) and cross-site scripting (XSS) flaws, often through improper input validation and insecure deserialization. Privilege escalation vulnerabilities have also been documented, allowing unauthorized access to system resources. The software's security posture has been marked by consistent vulnerability disclosures, with 10 CVEs currently on record, highlighting ongoing security challenges in its handling of file parsing and user inputs.
This page lists every published CVE security advisory associated with Soda PDF. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.