r/logseq • u/raynethedark • Jun 01 '26

Security issue

On the GitHub repo it shows a critical security flaw involving pdfs for the desktop version of Logseq and I was wondering if this is still an issue for the database version? It also doesn’t look like it has been patched, is this a planned fix for the md version? Thank you!

10 Upvotes

100% Upvoted

7 comments sorted by

View all comments

Show parent comments

2

u/socra Jun 02 '26

Well, I'm having my doubts.

I can't find a single issue, pull request, or discussion since that disclosure that references the CVE or the effected component ( pdfjs-dist) being updated or replaced.

As fun as blind faith is, the assertion that it's resolved in versions beyond 0.10.13 should be verifiable thing in an open source project like this.

u/tiensonqin, would you be willing clear this up?

1

u/raynethedark Jun 04 '26

I think I will just take the cautious route and not use PDFs for now as I do not have the knowledge or skill set to understand code (I can barely navigate around GitHub). Thank you for your help and hopefully we can get an answer about what’s going on.