An open index of dependabot pull requests across open source projects.

jspdf

Ecosystem:
npm
Package URL:
pkg:npm/jspdf
Total PRs:
2,124 Dependabot PRs
Latest PR:
3 days ago
Unique Repositories:
1,314 repositories
Unique Repos (30 days):
18 repositories
Security Advisories
jsPDF Affected by Client-Side/Server-Side Denial of Service via Malicious GIF Dimensions
GHSA-67pg-wm7f-q7fj CVE-2026-25535 HIGH published 4 months ago • updated 3 days ago
### Impact User control of the first argument of the `addImage` method results in denial of service. If given the possibility to pass unsanitized...
jsPDF Bypass Regular Expression Denial of Service (ReDoS)
GHSA-w532-jxjh-hjhj CVE-2025-29907 HIGH published about 1 year ago • updated about 1 month ago
### Impact User control of the first argument of the `addImage` method results in CPU utilization and denial of service. If given the possibility ...
Cross-site scripting in jspdf
GHSA-vh59-v9r5-4mh4 CVE-2020-7690 MODERATE published about 5 years ago • updated 2 days ago
Affected versions of this package are vulnerable to Cross-site Scripting (XSS). It's possible to inject JavaScript code via the `html` method.
jsPDF has a PDF Object Injection via FreeText color
GHSA-7x6v-j9x4-qf24 CVE-2026-31898 HIGH published 3 months ago • updated 17 days ago
### Impact User control of arguments of the `createAnnotation` method allows users to inject arbitrary PDF objects, such as JavaScript actions. I...
jsPDF Vulnerable to Stored XMP Metadata Injection (Spoofing & Integrity Violation)
GHSA-vm32-vv63-w422 CVE-2026-24043 MODERATE published 4 months ago • updated 11 days ago
### Impact User control of the first argument of the `addMetadata` function allows users to inject arbitrary XML. If given the possibility to pas...
Recent PRs (filtered by: Patch PRs )
Package Details
Name: jspdf
Ecosystem: npm
PURL Type: npm
Package URL: pkg:npm/jspdf
JSON API: View JSON
Security Advisories

15

Active advisories
CRITICAL 2
HIGH 9
MODERATE 4
View All npm Advisories
Package Information
Description:

PDF Document creation from JavaScript

Repository: https://github.com/MrRio/jsPDF
Homepage: https://github.com/mrrio/jspdf
Latest Release: 3.0.1
about 1 year ago
Dependent Repos: 21,994
Dependent Packages: 1,518
Downloads: 9,933,691
Ranking: Top 0.198% by dependent repos Top 0.1479% by downloads Top 0.0558% by dependent pkgs
PR Status
Open 1,113 (52.4%)
Merged 156 (7.3%)
Closed 822 (38.7%)
PR Types
Major 1,109 (52.2%)
Minor 354 (16.7%)
Patch 627 (29.5%)