Known vulnerabilities in jspdf

Vendor: Jelle_S
Software: jspdf
Software CPE: cpe:2.3:a:jelle_s:jspdf:*:*:*:*:*:drupal:*:*
Website: https://www.drupal.org/u/jelle_s
Total vulnerabilities: 17
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting jspdf jspdf is affected by 17 known vulnerabilities: 6 high, 7 medium, 4 low Critical High Medium Low

Vulnerabilities (17)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU127971 - Improper Encoding or Escaping of Output
CVE-2026-31898		 CWE-116 High
No
No
 4.2.1 27.04.2026 SB2026042736
#VU127970 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-31938		 CWE-79 Medium
No
No
 4.2.1 27.04.2026 SB2026042736
#VU127969 - Improper Control of Generation of Code ('Code Injection')
CVE-2026-25755		 CWE-94 High
No
No
 4.2.0 27.04.2026 SB2026042735
SB2026060121
#VU127968 - Allocation of Resources Without Limits or Throttling
CVE-2026-25535		 CWE-770 Medium
No
No
 4.2.0 27.04.2026 SB2026042735
SB2026060121
#VU127967 - Improper Encoding or Escaping of Output
CVE-2026-25940		 CWE-116 High
No
No
 4.2.0 27.04.2026 SB2026042735
SB2026060121
#VU127966 - Allocation of Resources Without Limits or Throttling
CVE-2026-24133		 CWE-770 Medium
No
No
 4.1.0 27.04.2026 SB2026042734
SB2026052633
#VU127965 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2026-24040		 CWE-362 Medium
No
No
 4.1.0 27.04.2026 SB2026042734
SB2026052633
#VU127964 - Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
CVE-2026-24043		 CWE-74 Medium
No
No
 4.1.0 27.04.2026 SB2026042734
SB2026052633
#VU127963 - Improper Encoding or Escaping of Output
CVE-2026-24737		 CWE-116 High
No
No
 4.1.0 27.04.2026 SB2026042734
SB2026052633
#VU120930 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2025-68428		 CWE-22 High
Available
No
 4.0.0 05.01.2026 SB2026010584
#VU114450 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2025-57810		 CWE-835 Medium
No
No
 3.0.2 27.08.2025 SB2025082720
SB2025100912
SB2025112543
and 4 more
#VU106009 - Resource exhaustion
CVE-2025-29907		 CWE-400 High
No
No
 3.0.1 25.03.2025 SB2025032525
SB2025043033
SB2025070353
and 1 more
#VU60183 - Incorrect Regular Expression
 CWE-185 Low
No
No
 2.5.1 31.01.2022 SB2022013108
#VU60182 - Improper Validation of Integrity Check Value
 CWE-354 Low
No
No
 2.5.1 31.01.2022 SB2022013108
#VU51274 - Resource Management Errors
CVE-2021-23353		 CWE-399 Medium
No
No
 2.3.1 09.03.2021 SB2021030912
#VU29619 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-7691		 CWE-79 Low
No
No
 - 09.07.2020 SB2020070927
#VU29618 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-7690		 CWE-79 Low
No
No
 - 09.07.2020 SB2020070927