EUVD-2026-22292

🗓️ 14 Apr 2026 18:30:35Reported by EUVDType

jsPDF vulnerable to stored Extensible Metadata Platform metadata injection enabling spoofing.

Reporter	Title	Published	Views	Family All 48
IBM Security Bulletins	Security Bulletin: IBM InfoSphere Optim Archive Viewer is affected by multiple vulnerabilities in jsPDF (CVE-2026-24040, CVE-2026-24043, CVE-2026-24133, CVE-2026-24737)	22 May 202612:32	–	ibm
ATTACKERKB	CVE-2026-24043	2 Feb 202620:34	–	attackerkb
ATTACKERKB	CVE-2026-24040	2 Feb 202620:38	–	attackerkb
Chainguard	CVE-2026-24040 vulnerabilities	11 Feb 202607:17	–	cgr
Chainguard	CVE-2026-24043 vulnerabilities	11 Feb 202607:17	–	cgr
CNNVD	jsPDF 注入漏洞	2 Feb 202600:00	–	cnnvd
CNNVD	jsPDF 竞争条件问题漏洞	2 Feb 202600:00	–	cnnvd
CNNVD	Schneider Electric PowerChute Serial Shutdown 安全漏洞	14 Apr 202600:00	–	cnnvd
CNVD	Schneider Electric PowerChute Serial Shutdown Security Bypass Vulnerability	15 Apr 202600:00	–	cnvd
CVE	CVE-2026-2404	14 Apr 202615:13	–	cve

[
  {
    "enisaIdVendor": [
      {
        "id": "de25547f-b687-3ac2-b5e7-e8df53f5eb52",
        "vendor": {
          "name": "Schneider Electric"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "44c487be-194a-3c80-b029-37981da5f3df",
        "product": {
          "name": "PowerChute™ Serial Shutdown"
        },
        "product_version": "Versions 1.4 and prior"
      }
    ]
  }
]

Source	Link
download	www.download.schneider-electric.com/files
github	www.github.com/parallax/jsPDF/security/advisories/GHSA-cjw8-79x6-5cj4
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-24040
github	www.github.com/parallax/jsPDF/commit/2863e5c26afef211a545e8c174ab4d5fce3b8c0e
github	www.github.com/parallax/jsPDF/releases/tag/v4.1.0
github	www.github.com/parallax/jsPDF/security/advisories/GHSA-vm32-vv63-w422
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-24043
github	www.github.com/parallax/jsPDF/commit/efe54bf50f3f5e5416b2495e3c24624fc80b6cff

14 Apr 2026 18:30Current

7.1High risk

Vulners AI Score7.1

CVSS 46.9

CVSS 3.15.4

EPSS0.00058

SSVC