jspdf vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2026-31938Criticaljspdf: jsPDF has HTML Injection in New Window paths CVE-2026-31898Highjspdf: jsPDF has a PDF Object Injection via FreeText color CVE-2026-25940Highjspdf: jsPDF has a PDF Injection in AcroForm module allows Arbitrary JavaScript Execution…CVE-2026-25755Highjspdf: jsPDF has a PDF Object Injection via Unsanitized Input in addJS Method CVE-2026-25535Highjspdf: jsPDF Affected by Client-Side/Server-Side Denial of Service via Malicious GIF Dimensions CVE-2026-24737Highjspdf: jsPDF has PDF Injection in AcroFormChoiceField that allows Arbitrary JavaScript Execution CVE-2026-24133Highjspdf: jsPDF Vulnerable to Denial of Service (DoS) via Unvalidated BMP Dimensions in BMPDecoder CVE-2026-24043Mediumjspdf: jsPDF Vulnerable to Stored XMP Metadata Injection (Spoofing & Integrity Violation)CVE-2026-24040Mediumjspdf: jsPDF has Shared State Race Condition in addJS Plugin CVE-2025-68428Criticaljspdf: jsPDF has Local File Inclusion/Path Traversal vulnerability CVE-2025-57810Highjspdf: jsPDF Denial of Service (DoS)CVE-2025-29907Highjspdf: jsPDF Bypass Regular Expression Denial of Service (ReDoS)CVE-2020-7690Mediumjspdf: Cross-site scripting in jspdf CVE-2020-7691Mediumjspdf: Cross-site scripting in jspdf CVE-2021-23353Highjspdf: jspdf vulnerable to Regular Expression Denial of Service (ReDoS)

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Get a personalized demo