CVE-2021-23353 | BDVDB-2026-150149 Detail
jspdf
Description#
This affects the package jspdf before 2.3.1. ReDoS is possible via the addImage function.
Impact#
Per CVSS v3.1: confidentiality impact none, integrity impact none, availability impact high. Attack vector: network.
Weaknesses#
No weakness recorded in the source data.
References#
- https://snyk.io/vuln/SNYK-JS-JSPDF-1073626
- https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-1083286
- https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSBOWER-1083287
- https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSBOWERGITHUBMRRIO-1083288
- https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARS-1083289
- https://github.com/MrRio/jsPDF/commit/d8bb3b39efcd129994f7a3b01b632164144ec43e
- https://github.com/MrRio/jsPDF/pull/3091
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.