Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:29646
HistoryMar 10, 2021 - 3:03 a.m.

Regular Expression Denial Of Service (ReDoS)

2021-03-1003:03:05
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
8

0.005 Low

EPSS

Percentile

76.5%

jspdf is vulnerable to regular expression denial of service. The vulnerability exists because it does not properly handle the regular expression for input image info extractedInfo in the function addImage , causing an application crash.

CPENameOperatorVersion
jspdfle2.3.0
jspdfle2.3.0
jspdfle2.3.0
jspdfle2.3.0

0.005 Low

EPSS

Percentile

76.5%