CVE-2026-25940

CVE-2026-25940 jsPDF PoC A proof-of-concept for CVE-2026-25940 demonstrating how specially crafted AcroForm radio button appearances can trigger embedded JavaScript in vulnerable PDF viewers e.g., Foxit. The repo includes a Node-based generator and a browser viewer harness to exercise different...

jsPDF-Bulk-Detector-CVE-2025-68428-

🚨 jsPDF Bulk Detector – CVE-2025-68428 🚨 Herramienta de detección a nivel de activos para identificar el uso de jsPDF relacionado con CVE-2025-68428. Solo detección — sin explotación. 🚨 Información de fondo Se divulgó una vulnerabilidad crítica en la popular librería de generación de PDF en...

jsPDF-Object-Injection

CVE-2026-25755 Sandbox Bypassed jsPDF Flaw to Object Injection Overview A critical PDF Object Injection vulnerability CVE-2026-25755 was discovered in jsPDF, a widely-used JavaScript library for generating PDF documents in client-side applications. The vulnerability exists in the addJS function,...

ROOT-APP-NPM-CVE-2026-25940 CVE-2026-25940 in jspdf - Patched by Root

Root has patched CVE-2026-25940 in the jspdf package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-25535 CVE-2026-25535 in jspdf - Patched by Root

Root has patched CVE-2026-25535 in the jspdf package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2025-57810 CVE-2025-57810 in jspdf - Patched by Root

Root has patched CVE-2025-57810 in the jspdf package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-24737 CVE-2026-24737 in jspdf - Patched by Root

Root has patched CVE-2026-24737 in the jspdf package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-31898 CVE-2026-31898 in jspdf - Patched by Root

Root has patched CVE-2026-31898 in the jspdf package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-24133 CVE-2026-24133 in jspdf - Patched by Root

Root has patched CVE-2026-24133 in the jspdf package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-31938 CVE-2026-31938 in jspdf - Patched by Root

Root has patched CVE-2026-31938 in the jspdf package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2025-68428 CVE-2025-68428 in jspdf - Patched by Root

Root has patched CVE-2025-68428 in the jspdf package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2025-29907 CVE-2025-29907 in jspdf - Patched by Root

Root has patched CVE-2025-29907 in the jspdf package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-25755 CVE-2026-25755 in jspdf - Patched by Root

Root has patched CVE-2026-25755 in the jspdf package for Root:npm. Multiple fixed versions available...

CLSA-2026-1780966318 TuxCare security update for jspdf (15 CVEs)

TuxCare rebuilt jspdf to address 15 CVEs. Fixed in 1.4.1-tuxcare.1...

Security Bulletin: Multiple Vulnerabilities in watsonx.data

Summary Multiple vulnerabilities were addressed in watsonx.data 2.3.1 patch 6 version, which was present in different version from watson.data 2.3.1 to watsonx.dat 2.3.1 Patch 5 Vulnerability Details CVEID:CVE-2025-15558 DESCRIPTION: Docker CLI for Windows searches for plugin binaries in...

Security Bulletin: IBM InfoSphere Optim Archive Viewer is affected by multiple vulnerabilities in jsPDF (CVE-2026-25535, CVE-2026-25755, CVE-2026-25940)

Summary Multiple vulnerabilities in the jsPDF library used by IBM InfoSphere Optim Archive Viewer have been addressed by upgrading the library to version 4.2.1. Vulnerability Details CVEID:CVE-2026-25535 DESCRIPTION: jsPDF is a library to generate PDFs in JavaScript. Prior to 4.2.0, user control ...

Security Bulletin: jsPDF addImage Method Vulnerable to DoS via Malicious Image Dimensions

Summary jsPDF is a library to generate PDFs in JavaScript. Prior to 4.2.0, user control of the first argument of the addImage method results in denial of service. If given the possibility to pass unsanitized image data or URLs to the addImage method, a user can provide a harmful GIF file that...

CVE-2026-31898

A flaw was found in jsPDF, a JavaScript library used for generating PDF documents. This vulnerability allows a remote attacker to inject arbitrary PDF objects, including JavaScript actions, into a generated PDF. This can occur if unsanitized user input is provided to the createAnnotation method's...

CVE-2026-31938

A flaw was found in jsPDF, a JavaScript library for generating PDFs. A remote attacker can exploit this vulnerability by providing malicious input to the options argument of the output function. When a victim creates and opens a PDF using this unsanitized input, arbitrary HTML, including scripts,...

CVE-2026-31938

jsPDF is a library to generate PDFs in JavaScript. Prior to version 4.2.1, user control of the options argument of the output function allows attackers to inject arbitrary HTML such as scripts into the browser context the created PDF is opened in. The vulnerability can be exploited in the followi...