A command injection vulnerability affects all versions of the package node-latex-pdf. References https://nvd.nist.gov/vuln/detail/CVE-2020-28433 https://security.snyk.io/vuln/SNYK-JS-NODELATEXPDF-1050426 https://github.com/advisories/GHSA-32fw-9wq8-9x9c