Description
All affected versions <2.0.0 of package jspdf are vulnerable to Cross-site Scripting (XSS). It is possible to inject JavaScript code via the html method.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | jspdf | <2.0.0 | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| npm | jspdf | < 2.0.0 | 2.0.0 | GHSA-vh59-v9r5-4mh4 |