jspdf

2 results · Clear filters · Feed

• Critical 9.6
  CVE-2026-31938

  jsPDF has HTML Injection in New Window paths

  jsPDF is a library to generate PDFs in JavaScript. Prior to version 4.2.1, user control of the `options` argument of the `output` function allows attackers to inject arbitrary HTML (such as scripts) into the browser context the created PDF is opened in. The v…

  parallax jsPDF opensearch-dashboards-3-dashboards-reporting opensearch-dashboards-3-dashboards-observability Wolfi npm
  Mar 18, 2026
• Critical 9.2
  CVE-2025-68428 Public exploit

  jsPDF has Local File Inclusion/Path Traversal vulnerability

  jsPDF is a library to generate PDFs in JavaScript. Prior to version 4.0.0, user control of the first argument of the loadFile method in the node.js build allows local file inclusion/path traversal. If given the possibility to pass unsanitized paths to the loa…

  parallax jsPDF opensearch-dashboards-3-dashboards-reporting opensearch-dashboards-3-dashboards-observability Wolfi npm
  Jan 5, 2026