MEDIUM6.1npm
GHSA-3q6f-8grx-pr4v· CVE-2020-7691Cross-site scripting in jspdf
Modified: 11/8/2023
package
npm/jspdf
pkg:npm/jspdf
HIGH7.5npm
GHSA-57f3-gghm-9mhc· CVE-2021-23353jspdf vulnerable to Regular Expression Denial of Service (ReDoS)
Modified: 1/14/2025
HIGHnpm
GHSA-67pg-wm7f-q7fj· CVE-2026-25535jsPDF Affected by Client-Side/Server-Side Denial of Service via Malicious GIF Dimensions
Modified: 9/10/2026
HIGH8.1npm
GHSA-7x6v-j9x4-qf24· CVE-2026-31898jsPDF has a PDF Object Injection via FreeText color
Modified: 9/10/2026
HIGH7.5npm
GHSA-8mvj-3j78-4qmw· CVE-2025-57810jsPDF Denial of Service (DoS)
Modified: 9/10/2026
HIGHnpm
GHSA-95fx-jjr5-f39c· CVE-2026-24133jsPDF Vulnerable to Denial of Service (DoS) via Unvalidated BMP Dimensions in BMPDecoder
Modified: 9/10/2026
HIGH8.1npm
GHSA-9vjf-qc39-jprp· CVE-2026-25755jsPDF has a PDF Object Injection via Unsanitized Input in addJS Method
Modified: 9/10/2026
MEDIUMnpm
GHSA-cjw8-79x6-5cj4· CVE-2026-24040jsPDF has Shared State Race Condition in addJS Plugin
Modified: 9/10/2026
CRITICALnpm
GHSA-f8cm-6447-x5h2· CVE-2025-68428jsPDF has Local File Inclusion/Path Traversal vulnerability
Modified: 9/10/2026
HIGH8.1npm
GHSA-p5xg-68wr-hm3m· CVE-2026-25940jsPDF has a PDF Injection in AcroForm module allows Arbitrary JavaScript Execution (RadioButton.createOption and "AS" property)
Modified: 9/10/2026
HIGH8.1npm
GHSA-pqxr-3g65-p328· CVE-2026-24737jsPDF has PDF Injection in AcroFormChoiceField that allows Arbitrary JavaScript Execution
Modified: 9/10/2026
MEDIUM6.1npm
GHSA-vh59-v9r5-4mh4· CVE-2020-7690, SNYK-JS-JSPDF-575256Cross-site scripting in jspdf
Modified: 7/8/2026
MEDIUMnpm
GHSA-vm32-vv63-w422· CVE-2026-24043jsPDF Vulnerable to Stored XMP Metadata Injection (Spoofing & Integrity Violation)
Modified: 9/10/2026
HIGHnpm
GHSA-w532-jxjh-hjhj· CVE-2025-29907jsPDF Bypass Regular Expression Denial of Service (ReDoS)
Modified: 9/10/2026
CRITICAL9.6npm
GHSA-wfv2-pwc8-crg5· CVE-2026-31938jsPDF has HTML Injection in New Window paths
Modified: 9/10/2026