As this is my 1st post, hopefully I do everything right ;-)
I see in the code that this component is based on https://github.com/mozilla/pdf.js/The version used in this component is v2.16.105 from 22 aug 2022.Current stable version is v4.5.136 from 27 July 2024.
There are some vulnerabilities in version v2.16.105, can this component be updated so it uses a more recent version?Regards,
Erik
Hi Erik,
You did everything right, so no need to worry :) Welcome to the community forums!
And yes, you're correct—the current forge implementation is way behind the latest version of pdf.js...
I want to upgrade the component, but I'm a bit short on time right now, which is why I haven't done it yet... There are some new features that people here in the forums are asking for that aren't in the current forge version, and I'd really like to see them added.
The component is open for community improvements, so if you feel up to it, you can try upgrading it yourself and then join the team to release a new version. Or any other community member can do it. Otherwise, we'll have to wait until I have the time to upgrade it.
Cheers!