~ / search / GHSA-3q6f-8grx-pr4v

GHSA-3q6f-8grx-pr4v

Cross-site scripting in jspdf

Source: GitHub Advisory Database (reviewed) Moderate CVE-2020-7691

Packages

EcosystemPackageAffectedFixed in
npm jspdf < 2.0.0 2.0.0

Details

As written in the advisory (Markdown source, shown as plain text).

It's possible to use nested script tags in order to bypass the filtering regex.

References

External links from the advisory. They lead to third-party sites.