jspdf vulnerable to Regular Expression Denial of Service (ReDoS)

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2021-23353 · ADVISORY
• MrRio/jsPDF#3091 · WEB
• MrRio/jsPDF commit d8bb3b3 · WEB
• snyk.io/vuln/SNYK-JAVA-ORGWEBJARS-1083289 · WEB
• snyk.io/vuln/SNYK-JAVA-ORGWEBJARSBOWER-1083287 · WEB
• snyk.io/vuln/SNYK-JAVA-ORGWEBJARSBOWERGITHUBMRRIO-1083288 · WEB
• snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-1083286 · WEB
• snyk.io/vuln/SNYK-JS-JSPDF-1073626 · WEB

jspdf のその他の脆弱性

• CVE-2026-31938中 6.1jsPDF is a library to generate PDFs in JavaScript. Prior to version 4.2.1, user control of the `options` argument of the `output` function a…
• CVE-2026-31898中 6.5jsPDF is a library to generate PDFs in JavaScript. Prior to version 4.2.1, user control of arguments of the `createAnnotation` method allows…
• CVE-2026-25940高 8.1jsPDF is a library to generate PDFs in JavaScript. Prior to 4.2.0, user control of properties and methods of the Acroform module allows user…
• CVE-2026-25755高 8.8jsPDF is a library to generate PDFs in JavaScript. Prior to 4.2.0, user control of the argument of the `addJS` method allows an attacker to …
• CVE-2026-25535高 7.5jsPDF is a library to generate PDFs in JavaScript. Prior to 4.2.0, user control of the first argument of the `addImage` method results in de…