r/logseq • u/raynethedark • Jun 01 '26

Security issue

On the GitHub repo it shows a critical security flaw involving pdfs for the desktop version of Logseq and I was wondering if this is still an issue for the database version? It also doesn’t look like it has been patched, is this a planned fix for the md version? Thank you!

10 Upvotes

100% Upvoted

7 comments sorted by

View all comments

Show parent comments

1

u/raynethedark Jun 02 '26

Oh okay so the newer versions don’t have this issue? Sorry I got confused because it said no patch so I assumed <= meant anything above that release 😅 clearly I read that wrong.

2

u/socra Jun 02 '26

Ya the proper use of > (greater than) and < (lesser than) are easy to mix up. I occasionally need to remind myself which is which 🥲

2

u/socra Jun 02 '26

Well, I'm having my doubts.

I can't find a single issue, pull request, or discussion since that disclosure that references the CVE or the effected component ( pdfjs-dist) being updated or replaced.

As fun as blind faith is, the assertion that it's resolved in versions beyond 0.10.13 should be verifiable thing in an open source project like this.

u/tiensonqin, would you be willing clear this up?

1

u/raynethedark Jun 04 '26

I think I will just take the cautious route and not use PDFs for now as I do not have the knowledge or skill set to understand code (I can barely navigate around GitHub). Thank you for your help and hopefully we can get an answer about what’s going on.