Product
An argument injection vulnerability in the node-poppler package allows remote attackers to inject malicious command-line arguments via the file_path parameter.