[PDFx] PDF.js version used contains known vulnerabilities (2.12.313)

[bloemy7]

There is a known malicious code execution vulnerability in PDF.js: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-34342
It's now been patched but we should upgrade the PDF.js version used in the package to make sure it's patched in this package.

[H4NSWORST]

Is this a vulnerability on all platforms Flutter/PDFx supports or only on web?

[windcloudit]

I also have a request to upgrade to PDF.JS version 4.4.168. Do you have any idea?

[GP4cK]

This has been patched in #533
Make sure to run flutter pub run pdfx:install_web and that will update the pdf.js version in your index.html