Vulnerability index

Browse CVEs

14 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Jspdf MEDIUM 6.1
CVE-2026-31938

jsPDF is a library to generate PDFs in JavaScript. Prior to version 4.2.1, user control of the `options` argument of the `output` function allows att…

Fix: 4.2.1+
Fix from $1,600 2026-03-18
Jspdf MEDIUM 6.5
CVE-2026-31898

jsPDF is a library to generate PDFs in JavaScript. Prior to version 4.2.1, user control of arguments of the `createAnnotation` method allows users to…

Fix: 4.2.1+
Fix from $1,600 2026-03-18
Jspdf HIGH 8.1
CVE-2026-25940

jsPDF is a library to generate PDFs in JavaScript. Prior to 4.2.0, user control of properties and methods of the Acroform module allows users to inje…

Fix: 4.2.0+
Fix from $1,950 2026-02-19
Jspdf HIGH 8.8
CVE-2026-25755

jsPDF is a library to generate PDFs in JavaScript. Prior to 4.2.0, user control of the argument of the `addJS` method allows an attacker to inject ar…

Fix: 4.2.0+
Fix from $1,950 2026-02-19
Jspdf HIGH 7.5
CVE-2026-25535

jsPDF is a library to generate PDFs in JavaScript. Prior to 4.2.0, user control of the first argument of the `addImage` method results in denial of s…

Fix: 4.2.0+
Fix from $1,950 2026-02-19
Jspdf HIGH 8.1
CVE-2026-24737

jsPDF is a library to generate PDFs in JavaScript. Prior to 4.1.0, user control of properties and methods of the Acroform module allows users to inje…

Fix: 4.1.0+
Fix from $1,950 2026-02-02
Jspdf MEDIUM 6.5
CVE-2026-24133

jsPDF is a library to generate PDFs in JavaScript. Prior to 4.1.0, user control of the first argument of the addImage method results in denial of ser…

Fix: 4.1.0+
Fix from $1,600 2026-02-02
Jspdf MEDIUM 5.4
CVE-2026-24043

jsPDF is a library to generate PDFs in JavaScript. Prior to 4.1.0, user control of the first argument of the addMetadata function allows users to inj…

Fix: 4.1.0+
Fix from $1,600 2026-02-02
Jspdf HIGH 7.5
CVE-2025-68428

jsPDF is a library to generate PDFs in JavaScript. Prior to version 4.0.0, user control of the first argument of the loadFile method in the node.js b…

Fix: 4.0.0+
Fix from $1,950 2026-01-05
Jspdf HIGH 7.5
CVE-2025-57810

jsPDF is a library to generate PDFs in JavaScript. Prior to 3.0.2, user control of the first argument of the addImage method results in CPU utilizati…

Fix: 3.0.2+
Fix from $1,950 2025-08-26
Jspdf HIGH 7.5
CVE-2025-29907

jsPDF is a library to generate PDFs in JavaScript. Prior to 3.0.1, user control of the first argument of the addImage method results in CPU utilizati…

Fix: 3.0.1+
Fix from $1,950 2025-03-18
Jspdf HIGH 7.5
CVE-2021-23353

This affects the package jspdf before 2.3.1. ReDoS is possible via the addImage function.

Fix: 2.3.1+
Fix from $1,950 2021-03-09
Jspdf MEDIUM 6.1
CVE-2020-7690

All affected versions <2.0.0 of package jspdf are vulnerable to Cross-site Scripting (XSS). It is possible to inject JavaScript code via the html met…

Fix: 2.0.0+
Fix from $1,600 2020-07-06
Jspdf MEDIUM 6.1
CVE-2020-7691

In all versions of the package jspdf, it is possible to use <<script>script> in order to go over the filtering regex.

No fix yet
Fix from $1,600 2020-07-06