TI-2026-24484 CVE-2026-31938 · GHSA-wfv2-pwc8-crg5
jsPDF has HTML Injection in New Window paths
Priority MEDIUM 43
jsPDF is a library to generate PDFs in JavaScript.
Vulnerabilities
15 records
TI-2026-24450 CVE-2026-31898 · GHSA-7x6v-j9x4-qf24
jsPDF has a PDF Object Injection via FreeText color
Priority LOW 37
jsPDF is a library to generate PDFs in JavaScript.
TI-2026-20970 CVE-2026-25940 · GHSA-p5xg-68wr-hm3m
Improper output encoding in parallax jsPDF
Priority LOW 38
jsPDF is a library to generate PDFs in JavaScript.
TI-2026-20823 CVE-2026-25755 · GHSA-9vjf-qc39-jprp
jsPDF has PDF Object Injection via Unsanitized Input in addJS Method
Priority MEDIUM 42
jsPDF is a library to generate PDFs in JavaScript.
TI-2026-20644 CVE-2026-25535 · GHSA-67pg-wm7f-q7fj
jsPDF Affected by Client-Side/Server-Side Denial of Service via Malicious GIF Dimensions
Priority HIGH 77
jsPDF is a library to generate PDFs in JavaScript.
TI-2026-19369 CVE-2026-24040 · GHSA-cjw8-79x6-5cj4
jsPDF has a Shared State Race Condition in addJS Plugin
Priority LOW 34
jsPDF is a library to generate PDFs in JavaScript.
TI-2026-19371 CVE-2026-24043 · GHSA-vm32-vv63-w422
jsPDF Affected by Stored XMP Metadata Injection (Spoofing & Integrity Violation)
Priority LOW 36
jsPDF is a library to generate PDFs in JavaScript.
TI-2026-19451 CVE-2026-24133 · GHSA-95fx-jjr5-f39c
jsPDF Affected by Denial of Service (DoS) via Unvalidated BMP Dimensions in BMPDecoder
Priority LOW 39
jsPDF is a library to generate PDFs in JavaScript.
TI-2026-19942 CVE-2026-24737 · GHSA-pqxr-3g65-p328
jsPDF has a PDF Injection in AcroFormChoiceField which allows Arbitrary JavaScript Execution
Priority LOW 38
jsPDF is a library to generate PDFs in JavaScript.
TI-2025-41976 CVE-2025-68428 · GHSA-f8cm-6447-x5h2
jsPDF has Local File Inclusion/Path Traversal vulnerability
Priority MEDIUM 50
jsPDF is a library to generate PDFs in JavaScript.
TI-2025-35693 CVE-2025-57810 · GHSA-8mvj-3j78-4qmw
jsPDF Parsing of Corrupt PNGs Leads to Potential Denial of Service (DoS)
Priority HIGH 77
jsPDF is a library to generate PDFs in JavaScript.
TI-2025-21292 CVE-2025-29907 · GHSA-w532-jxjh-hjhj
jsPDF Bypass Regular Expression Denial of Service (ReDoS)
Priority HIGH 77
jsPDF is a library to generate PDFs in JavaScript.
TI-2021-06049 CVE-2021-23353 · GHSA-57f3-gghm-9mhc
Regular expression denial of service (ReDoS) in jspdf
Priority LOW 38
This affects the package jspdf before 2.3.1.
TI-2020-06210 CVE-2020-7690 · GHSA-vh59-v9r5-4mh4
Cross-site scripting in jspdf
Priority LOW 29
All affected versions <2.0.0 of package jspdf are vulnerable to Cross-site Scripting (XSS).
TI-2020-06211 CVE-2020-7691 · GHSA-3q6f-8grx-pr4v
Cross-site scripting (XSS) in jspdf
Priority LOW 31
In all versions of the package jspdf, it is possible to use <<script>script> in order to go over the filtering regex.