What’s Vulnerable › Products

parallax jsPDF vulnerabilities

15 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 12 published in the last 12 months.

Check whether your parallax jsPDF version is affected

Latest parallax jsPDF vulnerabilities

• CVE-2026-31938 — jsPDF has HTML Injection in New Window paths (CVSS 6.1)
• CVE-2026-31898 — jsPDF has a PDF Object Injection via FreeText color (CVSS 6.5)
• CVE-2026-25940 — jsPDF's PDF Injection in AcroForm module allows Arbitrary JavaScript Execution (RadioButton.createOption and "AS" property) (CVSS 8.1)
• CVE-2026-25755 — jsPDF has PDF Object Injection via Unsanitized Input in addJS Method (CVSS 8.8)
• CVE-2026-25535 — jsPDF Affected by Client-Side/Server-Side Denial of Service via Malicious GIF Dimensions (CVSS 7.5)
• CVE-2026-24737 — jsPDF has a PDF Injection in AcroFormChoiceField which allows Arbitrary JavaScript Execution (CVSS 8.1)
• CVE-2026-24133 — jsPDF Affected by Denial of Service (DoS) via Unvalidated BMP Dimensions in BMPDecoder (CVSS 6.5)
• CVE-2026-24043 — jsPDF Affected by Stored XMP Metadata Injection (Spoofing & Integrity Violation) (CVSS 5.4)
• CVE-2026-24040 — jsPDF has a Shared State Race Condition in addJS Plugin (CVSS 4.8)
• CVE-2025-68428 — jsPDF has Local File Inclusion/Path Traversal vulnerability (CVSS 7.5)
• CVE-2025-57810 — jsPDF Parsing of Corrupt PNGs Leads to Potential Denial of Service (DoS) (CVSS 7.5)
• CVE-2025-29907 — jsPDF Bypass Regular Expression Denial of Service (ReDoS) (CVSS 7.5)
• CVE-2021-23353 — Regular Expression Denial of Service (ReDoS) (CVSS 7.5)
• CVE-2020-7691 — Cross-site Scripting (XSS) (CVSS 6.1)
• CVE-2020-7690 — (CVSS 6.1)