185 matches found
GHSA-57F3-GGHM-9MHC jspdf vulnerable to Regular Expression Denial of Service (ReDoS)
This affects the package jspdf before 2.3.1. ReDoS is possible via the addImage function...
@0soft/zero-material-ui (>=0.0.1 <=0.0.25), @0xgg/echomd (>=1.0.0 <=1.0.4) +423 more potentially affected by CVE-2021-23353 via jspdf (>=1.0.272 <=2.3.0)
jspdf NPM version =1.0.272, =0.0.1, =1.0.0, =0.1.0, =0.0.1, =0.0.0-nightly-2020982921, =0.0.0-nightly-20215272227, =0.0.0-nightly-2021533445, =0.0.0-nightly-2021242250, =0.0.0-nightly-20214822614, =0.0.0-nightly-2020972106, =0.0.0-nightly-20213723126, =0.0.0-nightly-20214822614,...
jspdf vulnerable to Regular Expression Denial of Service (ReDoS)
This affects the package jspdf before 2.3.1. ReDoS is possible via the addImage function...
Regular Expression Denial Of Service (ReDoS)
jspdf is vulnerable to regular expression denial of service. The vulnerability exists because it does not properly handle the regular expression for input image info extractedInfo in the function addImage , causing an application crash...
CVE-2021-23353
This affects the package jspdf before 2.3.1. ReDoS is possible via the addImage function...
CVE-2021-23353
This affects the package jspdf before 2.3.1. ReDoS is possible via the addImage function...
CVE-2021-23353 Regular Expression Denial of Service (ReDoS)
This affects the package jspdf before 2.3.1. ReDoS is possible via the addImage function...
CVE-2021-23353
The CVE-2021-23353 entry concerns jspdf before version 2.3.1, where a Regular Expression Denial of Service (ReDoS) is possible via the addImage function. Multiple sources (NVD, Node.js advisory, GitHub advisory, OSV, Veracode, CVE list) confirm the affected component and the vulnerability class. ...
CVE-2021-23353
This affects the package jspdf before 2.3.1. ReDoS is possible via the addImage function...
LukasHolländer jsPDF 安全漏洞
LukasHolländer jsPDF is LukasHolländer an open source application . Provides a library to generate PDF using JavaScript . jspdf before 2.3.1 A security vulnerability exists, which stems from the fact that ReDoS can be implemented via an additional function...
@0soft/zero-material-ui (>=0.0.1 <=0.0.25), @abegalinov/backoffice-skeleton (>=0.1.0 <=0.4.9) +305 more potentially affected by CVE-2021-23353 via jspdf (>=2.0.0 <=2.3.0)
jspdf NPM version =2.0.0, =0.0.1, =0.1.0, =0.0.1, =0.0.0-nightly-2020982921, =0.0.0-nightly-20215272227, =0.0.0-nightly-2021533445, =0.0.0-nightly-2021242250, =0.0.0-nightly-20214822614, =0.0.0-nightly-2020972106, =0.0.0-nightly-20213723126, =0.0.0-nightly-20214822614, =0.0.0-nightly-2020972106,...
Cross-Site Scripting (XSS)
jspdf is vulnerable to cross-site scripting. An attacker is able to inject and execute arbitrary Javascript in a user's browser by bypassing the filtering regex using...
jsPDF cross-site scripting vulnerability
jsPDF is a JavaScript-based PDF document generation library . A cross-site scripting vulnerability exists in all versions of jsPDF. The vulnerability stems from the lack of proper validation of client-side data by the WEB application. An attacker can exploit the vulnerability to execute client-si...
CVE-2020-7691
In all versions of the package jspdf, it is possible to use script in order to go over the filtering regex...
CVE-2020-7691
In all versions of the package jspdf, it is possible to use script in order to go over the filtering regex...
CVE-2020-7690
All affected versions 2.0.0 of package jspdf are vulnerable to Cross-site Scripting XSS. It is possible to inject JavaScript code via the html method...
Cross site scripting
All affected versions 2.0.0 of package jspdf are vulnerable to Cross-site Scripting XSS. It is possible to inject JavaScript code via the html method...
Design/Logic Flaw
In all versions of the package jspdf, it is possible to use script in order to go over the filtering regex...
CVE-2020-7690
CVE-2020-7690 affects jspdf versions before 2.0.0, where the html() method can be used to inject JavaScript via XSS. Affected software is jspdf prior to 2.0.0; the vulnerability enables executing injected scripts in user-controlled contexts. The Red Hat, GitHub Advisory, npm Advisory, and CVE rec...