Browse CVEs

MEDIUM 6.1 CVE-2026-31938 jsPDF is a library to generate PDFs in JavaScript. Prior to version 4.2.1, user control of the `options` argument of the `output` function allows att… Jspdf 4.2.1+ Fix from $1,6002026-03-18 MEDIUM 6.5 CVE-2026-31898 jsPDF is a library to generate PDFs in JavaScript. Prior to version 4.2.1, user control of arguments of the `createAnnotation` method allows users to… Jspdf 4.2.1+ Fix from $1,6002026-03-18 HIGH 8.1 CVE-2026-25940 jsPDF is a library to generate PDFs in JavaScript. Prior to 4.2.0, user control of properties and methods of the Acroform module allows users to inje… Jspdf 4.2.0+ Fix from $1,9502026-02-19 HIGH 8.8 CVE-2026-25755 jsPDF is a library to generate PDFs in JavaScript. Prior to 4.2.0, user control of the argument of the `addJS` method allows an attacker to inject ar… Jspdf 4.2.0+ Fix from $1,9502026-02-19 HIGH 7.5 CVE-2026-25535 jsPDF is a library to generate PDFs in JavaScript. Prior to 4.2.0, user control of the first argument of the `addImage` method results in denial of s… Jspdf 4.2.0+ Fix from $1,9502026-02-19 HIGH 8.1 CVE-2026-24737 jsPDF is a library to generate PDFs in JavaScript. Prior to 4.1.0, user control of properties and methods of the Acroform module allows users to inje… Jspdf 4.1.0+ Fix from $1,9502026-02-02 MEDIUM 6.5 CVE-2026-24133 jsPDF is a library to generate PDFs in JavaScript. Prior to 4.1.0, user control of the first argument of the addImage method results in denial of ser… Jspdf 4.1.0+ Fix from $1,6002026-02-02 MEDIUM 5.4 CVE-2026-24043 jsPDF is a library to generate PDFs in JavaScript. Prior to 4.1.0, user control of the first argument of the addMetadata function allows users to inj… Jspdf 4.1.0+ Fix from $1,6002026-02-02 HIGH 7.5 CVE-2025-68428 jsPDF is a library to generate PDFs in JavaScript. Prior to version 4.0.0, user control of the first argument of the loadFile method in the node.js b… Jspdf 4.0.0+ Fix from $1,9502026-01-05 HIGH 7.5 CVE-2025-57810 jsPDF is a library to generate PDFs in JavaScript. Prior to 3.0.2, user control of the first argument of the addImage method results in CPU utilizati… Jspdf 3.0.2+ Fix from $1,9502025-08-26 HIGH 7.5 CVE-2025-29907 jsPDF is a library to generate PDFs in JavaScript. Prior to 3.0.1, user control of the first argument of the addImage method results in CPU utilizati… Jspdf 3.0.1+ Fix from $1,9502025-03-18 HIGH 7.5 CVE-2021-23353 This affects the package jspdf before 2.3.1. ReDoS is possible via the addImage function. Jspdf 2.3.1+ Fix from $1,9502021-03-09 MEDIUM 6.1 CVE-2020-7690 All affected versions <2.0.0 of package jspdf are vulnerable to Cross-site Scripting (XSS). It is possible to inject JavaScript code via the html met… Jspdf 2.0.0+ Fix from $1,6002020-07-06 MEDIUM 6.1 CVE-2020-7691 In all versions of the package jspdf, it is possible to use <<script>script> in order to go over the filtering regex. Jspdf No fix yet Fix from $1,6002020-07-06