CVE-2026-25940

The jsPDF library (prior to version 4.2.0 ) is vulnerable to a PDF injection flaw in its Acroform module. Specifically, failing to sanitize input for properties such as AcroformChildClass.appearanceState allows attackers to inject arbitrary PDF objects , including JavaScript actions . These actio...