Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
mrjameshall/jspdf could let attackers alter documents
published 3 months ago
Summary
The JavaScript PDF library jspdf contained a weakness that could let a malicious user change the content of generated PDFs. This could affect any web application that uses the library to create or edit PDF files. Update the library to version 2.5.2‑tuxcare.4 as soon as possible to close the risk.
What to do
- Update mrjameshall jspdf to version 2.5.2-tuxcare.4.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| TuxCare:npm | mrjameshall | jspdf |
>= 2.5.2-tuxcare.0, < 2.5.2-tuxcare.4 Fix: upgrade to 2.5.2-tuxcare.4
|
Original advisory text
TuxCare security update for jspdf (1 CVE)
TuxCare rebuilt jspdf to address 1 CVE. Fixed in 2.5.2-tuxcare.4.
Timeline
Published4 Aug 2026
Updated15 Oct 2026
First seen15 Oct 2026
Sources
CLSA-2026-1773620208 · OSV
Track software like this
Free during beta