PA
Vendor
parallax
12
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-90943 | FI filament-comments parallax | 8.7 | Sep 14 | parallax filament-comments through 3.0.0 Stored XSS via Comment Body |
| CVE-2026-31938 | JS jsPDF parallax | 6.1 | Mar 18 | jsPDF has HTML Injection in New Window paths |
| CVE-2026-31898 | JS jsPDF parallax | 6.5 | Mar 18 | jsPDF has a PDF Object Injection via FreeText color |
| CVE-2026-25940 | JS jsPDF parallax | 8.1 | Feb 19 | jsPDF's PDF Injection in AcroForm module allows Arbitrary JavaScript Execution (RadioButton.createOption and "AS" property) |
| CVE-2026-25755 | JS jsPDF parallax | 8.8 | Feb 19 | jsPDF has PDF Object Injection via Unsanitized Input in addJS Method |
| CVE-2026-25535 | JS jsPDF parallax | 7.5 | Feb 19 | jsPDF Affected by Client-Side/Server-Side Denial of Service via Malicious GIF Dimensions |
| CVE-2026-24040 | JS jsPDF parallax | 4.8 | Feb 2 | jsPDF has a Shared State Race Condition in addJS Plugin |
| CVE-2026-24043 | JS jsPDF parallax | 5.4 | Feb 2 | jsPDF Affected by Stored XMP Metadata Injection (Spoofing & Integrity Violation) |
| CVE-2026-24133 | JS jsPDF parallax | 6.5 | Feb 2 | jsPDF Affected by Denial of Service (DoS) via Unvalidated BMP Dimensions in BMPDecoder |
| CVE-2026-24737 | JS jsPDF parallax | 8.1 | Feb 2 | jsPDF has a PDF Injection in AcroFormChoiceField which allows Arbitrary JavaScript Execution |
| CVE-2025-68428 | JS jsPDF parallax | 7.5 | Jan 5 | jsPDF has Local File Inclusion/Path Traversal vulnerability |
| CVE-2025-57810 | JS jsPDF parallax | 7.5 | Aug 26 | jsPDF Parsing of Corrupt PNGs Leads to Potential Denial of Service (DoS) |