~ / search / GHSA-57f3-gghm-9mhc

GHSA-57f3-gghm-9mhc

jspdf vulnerable to Regular Expression Denial of Service (ReDoS)

Source: GitHub Advisory Database (reviewed) High CVE-2021-23353

Packages

EcosystemPackageAffectedFixed in
npm jspdf < 2.3.1 2.3.1

Details

As written in the advisory (Markdown source, shown as plain text).

This affects the package jspdf before 2.3.1. ReDoS is possible via the addImage function.

References

External links from the advisory. They lead to third-party sites.