298 matches found
@0soft/zero-material-ui (>=0.0.1, <=0.0.25), @abegalinov/backoffice-skeleton (>=0.1.0, <=0.4.9) +300 more potentially affected by CVE-2021-23353 via jspdf (>=2.0.0, <=2.3.0)
jspdf NPM version =2.0.0, =0.0.1, =0.1.0, =0.0.1, =0.0.0-nightly-202010102951, =0.0.0-nightly-202151822534, =0.0.0-nightly-202151023138, =0.0.0-nightly-2020112923923, =0.0.0-nightly-202141023010, =0.0.0-nightly-202010102951, =0.0.0-nightly-202122521518, =0.0.0-nightly-202121722854,...
GHSA-57F3-GGHM-9MHC jspdf vulnerable to Regular Expression Denial of Service (ReDoS)
This affects the package jspdf before 2.3.1. ReDoS is possible via the addImage function...
jspdf vulnerable to Regular Expression Denial of Service (ReDoS)
This affects the package jspdf before 2.3.1. ReDoS is possible via the addImage function...
Regular Expression Denial Of Service (ReDoS)
jspdf is vulnerable to regular expression denial of service. The vulnerability exists because it does not properly handle the regular expression for input image info extractedInfo in the function addImage , causing an application crash...
CVE-2021-23353
This affects the package jspdf before 2.3.1. ReDoS is possible via the addImage function...
CVE-2021-23353
This affects the package jspdf before 2.3.1. ReDoS is possible via the addImage function...
CVE-2021-23353 Regular Expression Denial of Service (ReDoS)
This affects the package jspdf before 2.3.1. ReDoS is possible via the addImage function...
@0soft/zero-material-ui (>=0.0.1, <=0.0.25), @0xgg/echomd (>=1.0.0, <=1.0.4) +418 more potentially affected by CVE-2021-23353 via jspdf (>=1.0.272, <=2.3.0)
jspdf NPM version =1.0.272, =0.0.1, =1.0.0, =0.1.0, =0.0.1, =0.0.0-nightly-202010102951, =0.0.0-nightly-202151822534, =0.0.0-nightly-202151023138, =0.0.0-nightly-2020112923923, =0.0.0-nightly-202141023010, =0.0.0-nightly-202010102951, =0.0.0-nightly-202122521518, =0.0.0-nightly-202121722854,...
CVE-2021-23353
This affects the package jspdf before 2.3.1. ReDoS is possible via the addImage function...
CVE-2021-23353
The CVE-2021-23353 entry concerns jspdf before version 2.3.1, where a Regular Expression Denial of Service (ReDoS) is possible via the addImage function. Multiple sources (NVD, Node.js advisory, GitHub advisory, OSV, Veracode, CVE list) confirm the affected component and the vulnerability class. ...
CVE-2021-23353
This affects the package jspdf before 2.3.1. ReDoS is possible via the addImage function...
CVE-2021-23353: Undefined Security Weakness
This affects the package jspdf before 2.3.1. ReDoS is possible via the addImage function...
PT-2021-15455
Name of the Vulnerable Software and Affected Versions jspdf versions prior to 2.3.1 Description The issue allows for ReDoS via the addImage function. Recommendations For versions prior to 2.3.1, update to version 2.3.1 or later to resolve the issue. As a temporary workaround, consider disabling t...
LukasHolländer jsPDF security vulnerability
LukasHolländer jsPDF is LukasHolländer an open source application . Provides a library to generate PDF using JavaScript . jspdf before 2.3.1 A security vulnerability exists, which stems from the fact that ReDoS can be implemented via an additional function...
@0soft/zero-material-ui (>=0.0.1, <=0.0.25), @abegalinov/backoffice-skeleton (>=0.1.0, <=0.4.9) +300 more potentially affected by CVE-2021-23353 via jspdf (>=2.0.0, <=2.3.0)
jspdf NPM version =2.0.0, =0.0.1, =0.1.0, =0.0.1, =0.0.0-nightly-202010102951, =0.0.0-nightly-202151822534, =0.0.0-nightly-202151023138, =0.0.0-nightly-2020112923923, =0.0.0-nightly-202141023010, =0.0.0-nightly-202010102951, =0.0.0-nightly-202122521518, =0.0.0-nightly-202121722854,...
Cross-Site Scripting (XSS)
jspdf is vulnerable to cross-site scripting. An attacker is able to inject and execute arbitrary Javascript in a user's browser by bypassing the filtering regex using...
jsPDF cross-site scripting vulnerability
jsPDF is a JavaScript-based PDF document generation library . A cross-site scripting vulnerability exists in all versions of jsPDF. The vulnerability stems from the lack of proper validation of client-side data by the WEB application. An attacker can exploit the vulnerability to execute client-si...
CVE-2020-7690
All affected versions 2.0.0 of package jspdf are vulnerable to Cross-site Scripting XSS. It is possible to inject JavaScript code via the html method...