CVE-2026-25940

CVE-2026-25940 jsPDF PoC CVE-2026-25940에 대한 개념 증명PoC으로, 특수하게 제작된 AcroForm 라디오 버튼 외형이 취약한 PDF 뷰어예: Foxit에서 임베디드 JavaScript를 트리거할 수 있음을 보여줍니다. 이 저장소에는 다양한 파싱 경로를 테스트하기 위한 Node 기반 생성기와 브라우저 뷰어 하네스가 포함되어 있습니다. ⚠️ 격리된 비프로덕션 환경에서만 사용하세요. 샘플 페이로드는 의도적으로 JavaScript를 실행하며 네트워크 요청이나 외부 프로그램을 호출할 수 있습니다. 소중한...

jsPDF-Bulk-Detector-CVE-2025-68428-

🚨 jsPDF Bulk Detector – CVE-2025-68428 🚨 여러 자산에서 CVE-2025-68428과 관련된 jsPDF 사용 여부를 식별하는 탐지 도구입니다. 탐지만 수행하며, 악용은 포함하지 않습니다. 🚨 배경 인기 있는 JavaScript PDF 생성 라이브러리 jsPDF에서 CVE-2025-68428로 추적되는 심각한 취약점이 공개되었습니다. BleepingComputer의 보고에 따르면, 이 결함은 Node.js 환경에서 jsPDF가 사용되고 사용자 제어 입력이 파일 로딩 함수에 도달할 때 공격자가 임의의...

jsPDF-Object-Injection

CVE-2026-25755 샌드박스 우회 jsPDF 결함으로 객체 주입 발생 개요 jsPDF에서 치명적인 PDF 객체 주입 취약점CVE-2026-25755이 발견되었습니다. jsPDF는 클라이언트 측 애플리케이션에서 PDF 문서를 생성하는 데 널리 사용되는 JavaScript 라이브러리입니다. 이 취약점은 addJS 함수에 존재하며, 공격자가 부적절한 입력 검증을 통해 임의의 PDF 객체를 주입하고 AcroJS 샌드박스 제한을 우회할 수 있게 합니다. 근본 원인 jsPDF의 addJS 함수는 개발자가 생성된 PDF 파일 내에...

ROOT-APP-NPM-CVE-2026-25535 CVE-2026-25535 in jspdf - Patched by Root

Root has patched CVE-2026-25535 in the jspdf package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-25940 CVE-2026-25940 in jspdf - Patched by Root

Root has patched CVE-2026-25940 in the jspdf package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-24737 CVE-2026-24737 in jspdf - Patched by Root

Root has patched CVE-2026-24737 in the jspdf package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2025-57810 CVE-2025-57810 in jspdf - Patched by Root

Root has patched CVE-2025-57810 in the jspdf package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-24133 CVE-2026-24133 in jspdf - Patched by Root

Root has patched CVE-2026-24133 in the jspdf package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-31898 CVE-2026-31898 in jspdf - Patched by Root

Root has patched CVE-2026-31898 in the jspdf package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2025-68428 CVE-2025-68428 in jspdf - Patched by Root

Root has patched CVE-2025-68428 in the jspdf package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2025-29907 CVE-2025-29907 in jspdf - Patched by Root

Root has patched CVE-2025-29907 in the jspdf package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-25755 CVE-2026-25755 in jspdf - Patched by Root

Root has patched CVE-2026-25755 in the jspdf package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-31938 CVE-2026-31938 in jspdf - Patched by Root

Root has patched CVE-2026-31938 in the jspdf package for Root:npm. Multiple fixed versions available...

CLSA-2026-1780966318 TuxCare security update for jspdf (15 CVEs)

TuxCare rebuilt jspdf to address 15 CVEs. Fixed in 1.4.1-tuxcare.1...

Security Bulletin: Multiple Vulnerabilities in watsonx.data

Summary Multiple vulnerabilities were addressed in watsonx.data 2.3.1 patch 6 version, which was present in different version from watson.data 2.3.1 to watsonx.dat 2.3.1 Patch 5 Vulnerability Details CVEID:CVE-2025-15558 DESCRIPTION: Docker CLI for Windows searches for plugin binaries in...

Security Bulletin: IBM InfoSphere Optim Archive Viewer is affected by multiple vulnerabilities in jsPDF (CVE-2026-25535, CVE-2026-25755, CVE-2026-25940)

Summary Multiple vulnerabilities in the jsPDF library used by IBM InfoSphere Optim Archive Viewer have been addressed by upgrading the library to version 4.2.1. Vulnerability Details CVEID:CVE-2026-25535 DESCRIPTION: jsPDF is a library to generate PDFs in JavaScript. Prior to 4.2.0, user control ...

Security Bulletin: jsPDF addImage Method Vulnerable to DoS via Malicious Image Dimensions

Summary jsPDF is a library to generate PDFs in JavaScript. Prior to 4.2.0, user control of the first argument of the addImage method results in denial of service. If given the possibility to pass unsanitized image data or URLs to the addImage method, a user can provide a harmful GIF file that...

CVE-2026-31898

A flaw was found in jsPDF, a JavaScript library used for generating PDF documents. This vulnerability allows a remote attacker to inject arbitrary PDF objects, including JavaScript actions, into a generated PDF. This can occur if unsanitized user input is provided to the createAnnotation method's...

CVE-2026-31938

A flaw was found in jsPDF, a JavaScript library for generating PDFs. A remote attacker can exploit this vulnerability by providing malicious input to the options argument of the output function. When a victim creates and opens a PDF using this unsanitized input, arbitrary HTML, including scripts,...

CVE-2026-31938

jsPDF is a library to generate PDFs in JavaScript. Prior to version 4.2.1, user control of the options argument of the output function allows attackers to inject arbitrary HTML such as scripts into the browser context the created PDF is opened in. The vulnerability can be exploited in the followi...