JS
Product
jsPDF
11
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 6Medium 5Low 0
Watch
Add jsPDF to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-31898 | 6.5 | Mar 18 | jsPDF has a PDF Object Injection via FreeText color Affected: < 4.2.1 |
| CVE-2026-24133 | 6.5 | Feb 2 | jsPDF Affected by Denial of Service (DoS) via Unvalidated BMP Dimensions in BMPDecoder Affected: < 4.1.0 |
| CVE-2026-31938 | 6.1 | Mar 18 | jsPDF has HTML Injection in New Window paths Affected: < 4.2.1 |
| CVE-2026-24043 | 5.4 | Feb 2 | jsPDF Affected by Stored XMP Metadata Injection (Spoofing & Integrity Violation) Affected: < 4.1.0 |
| CVE-2026-24040 | 4.8 | Feb 2 | jsPDF has a Shared State Race Condition in addJS Plugin Affected: < 4.1.0 |
Showing 5