ROOT-APP-NPM-CVE-2026-25535 CVE-2026-25535 in jspdf - Patched by Root

Root has patched CVE-2026-25535 in the jspdf package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-25940 CVE-2026-25940 in jspdf - Patched by Root

Root has patched CVE-2026-25940 in the jspdf package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-24737 CVE-2026-24737 in jspdf - Patched by Root

Root has patched CVE-2026-24737 in the jspdf package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2025-57810 CVE-2025-57810 in jspdf - Patched by Root

Root has patched CVE-2025-57810 in the jspdf package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2025-29907 CVE-2025-29907 in jspdf - Patched by Root

Root has patched CVE-2025-29907 in the jspdf package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-31938 CVE-2026-31938 in jspdf - Patched by Root

Root has patched CVE-2026-31938 in the jspdf package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-31898 CVE-2026-31898 in jspdf - Patched by Root

Root has patched CVE-2026-31898 in the jspdf package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2025-68428 CVE-2025-68428 in jspdf - Patched by Root

Root has patched CVE-2025-68428 in the jspdf package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-24133 CVE-2026-24133 in jspdf - Patched by Root

Root has patched CVE-2026-24133 in the jspdf package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-25755 CVE-2026-25755 in jspdf - Patched by Root

Root has patched CVE-2026-25755 in the jspdf package for Root:npm. Multiple fixed versions available...

CLSA-2026-1780966318 TuxCare security update for jspdf (8 CVEs)

TuxCare rebuilt jspdf to address 8 CVEs. Fixed in 1.4.1-tuxcare.1...

Security Bulletin: Multiple Vulnerabilities in watsonx.data

Summary Multiple vulnerabilities were addressed in watsonx.data 2.3.1 patch 6 version, which was present in different version from watson.data 2.3.1 to watsonx.dat 2.3.1 Patch 5 Vulnerability Details CVEID:CVE-2025-15558 DESCRIPTION: Docker CLI for Windows searches for plugin binaries in...

Security Bulletin: IBM InfoSphere Optim Archive Viewer is affected by multiple vulnerabilities in jsPDF (CVE-2026-25535, CVE-2026-25755, CVE-2026-25940)

Summary Multiple vulnerabilities in the jsPDF library used by IBM InfoSphere Optim Archive Viewer have been addressed by upgrading the library to version 4.2.1. Vulnerability Details CVEID:CVE-2026-25535 DESCRIPTION: jsPDF is a library to generate PDFs in JavaScript. Prior to 4.2.0, user control ...

Security Bulletin: jsPDF addImage Method Vulnerable to DoS via Malicious Image Dimensions

Summary jsPDF is a library to generate PDFs in JavaScript. Prior to 4.2.0, user control of the first argument of the addImage method results in denial of service. If given the possibility to pass unsanitized image data or URLs to the addImage method, a user can provide a harmful GIF file that...

CVE-2026-31898

A flaw was found in jsPDF, a JavaScript library used for generating PDF documents. This vulnerability allows a remote attacker to inject arbitrary PDF objects, including JavaScript actions, into a generated PDF. This can occur if unsanitized user input is provided to the createAnnotation method's...

CVE-2026-31938

A flaw was found in jsPDF, a JavaScript library for generating PDFs. A remote attacker can exploit this vulnerability by providing malicious input to the options argument of the output function. When a victim creates and opens a PDF using this unsanitized input, arbitrary HTML, including scripts,...

CVE-2026-31938

jsPDF is a library to generate PDFs in JavaScript. Prior to version 4.2.1, user control of the options argument of the output function allows attackers to inject arbitrary HTML such as scripts into the browser context the created PDF is opened in. The vulnerability can be exploited in the followi...

CVE-2026-31898

jsPDF is a library to generate PDFs in JavaScript. Prior to version 4.2.1, user control of arguments of the createAnnotation method allows users to inject arbitrary PDF objects, such as JavaScript actions. If given the possibility to pass unsanitized input to the following method, a user can inje...

CVE-2026-31938

jsPDF is a library to generate PDFs in JavaScript. Prior to version 4.2.1, user control of the options argument of the output function allows attackers to inject arbitrary HTML such as scripts into the browser context the created PDF is opened in. The vulnerability can be exploited in the followi...

CVE-2026-31938 jsPDF has HTML Injection in New Window paths

jsPDF is a library to generate PDFs in JavaScript. Prior to version 4.2.1, user control of the options argument of the output function allows attackers to inject arbitrary HTML such as scripts into the browser context the created PDF is opened in. The vulnerability can be exploited in the followi...