md-to-pdf vulnerable to arbitrary JavaScript code execution when parsing front matter
A Markdown front-matter block that contains JavaScript delimiter causes the JS engine in gray-matter library to execute arbitrary code in the Markdown to PDF converter process of md-to-pdf library, resulting in remote code execution.