Description
In all versions of the package jspdf, it is possible to use <<script>script> in order to go over the filtering regex.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | jspdf | < unspecified | unspecified |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| npm | jspdf | < 2.0.0 | 2.0.0 | GHSA-3q6f-8grx-pr4v |