TI-2026-20644 CVE-2026-25535 · GHSA-67pg-wm7f-q7fj
jsPDF Affected by Client-Side/Server-Side Denial of Service via Malicious GIF Dimensions
Priority HIGH 77
jsPDF is a library to generate PDFs in JavaScript.
parallax
Records16All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical3CVSS 9.0–10.0
CVSS high9CVSS 7.0–8.9
Exploited now
parallax records in CISA KEVNo parallax vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
15 records in Jspdf · all components
TI-2025-35693 CVE-2025-57810 · GHSA-8mvj-3j78-4qmw
jsPDF Parsing of Corrupt PNGs Leads to Potential Denial of Service (DoS)
Priority HIGH 77
jsPDF is a library to generate PDFs in JavaScript.
TI-2025-21292 CVE-2025-29907 · GHSA-w532-jxjh-hjhj
jsPDF Bypass Regular Expression Denial of Service (ReDoS)
Priority HIGH 77
jsPDF is a library to generate PDFs in JavaScript.
TI-2025-41976 CVE-2025-68428 · GHSA-f8cm-6447-x5h2
jsPDF has Local File Inclusion/Path Traversal vulnerability
Priority MEDIUM 50
jsPDF is a library to generate PDFs in JavaScript.
TI-2026-24484 CVE-2026-31938 · GHSA-wfv2-pwc8-crg5
jsPDF has HTML Injection in New Window paths
Priority MEDIUM 43
jsPDF is a library to generate PDFs in JavaScript.
TI-2026-20823 CVE-2026-25755 · GHSA-9vjf-qc39-jprp
jsPDF has PDF Object Injection via Unsanitized Input in addJS Method
Priority MEDIUM 42
jsPDF is a library to generate PDFs in JavaScript.
TI-2026-19451 CVE-2026-24133 · GHSA-95fx-jjr5-f39c
jsPDF Affected by Denial of Service (DoS) via Unvalidated BMP Dimensions in BMPDecoder
Priority LOW 39
jsPDF is a library to generate PDFs in JavaScript.
TI-2026-20970 CVE-2026-25940 · GHSA-p5xg-68wr-hm3m
Improper output encoding in parallax jsPDF
Priority LOW 38
jsPDF is a library to generate PDFs in JavaScript.
TI-2026-19942 CVE-2026-24737 · GHSA-pqxr-3g65-p328
jsPDF has a PDF Injection in AcroFormChoiceField which allows Arbitrary JavaScript Execution
Priority LOW 38
jsPDF is a library to generate PDFs in JavaScript.
TI-2021-06049 CVE-2021-23353 · GHSA-57f3-gghm-9mhc
Regular expression denial of service (ReDoS) in jspdf
Priority LOW 38
This affects the package jspdf before 2.3.1.
TI-2026-24450 CVE-2026-31898 · GHSA-7x6v-j9x4-qf24
jsPDF has a PDF Object Injection via FreeText color
Priority LOW 37
jsPDF is a library to generate PDFs in JavaScript.
TI-2026-19371 CVE-2026-24043 · GHSA-vm32-vv63-w422
jsPDF Affected by Stored XMP Metadata Injection (Spoofing & Integrity Violation)
Priority LOW 36
jsPDF is a library to generate PDFs in JavaScript.
TI-2026-19369 CVE-2026-24040 · GHSA-cjw8-79x6-5cj4
jsPDF has a Shared State Race Condition in addJS Plugin
Priority LOW 34
jsPDF is a library to generate PDFs in JavaScript.
TI-2020-06211 CVE-2020-7691 · GHSA-3q6f-8grx-pr4v
Cross-site scripting (XSS) in jspdf
Priority LOW 31
In all versions of the package jspdf, it is possible to use <<script>script> in order to go over the filtering regex.
TI-2020-06210 CVE-2020-7690 · GHSA-vh59-v9r5-4mh4
Cross-site scripting in jspdf
Priority LOW 29
All affected versions <2.0.0 of package jspdf are vulnerable to Cross-site Scripting (XSS).