Staging Environment: Content and features may be unstable or change without notice.
Search for vulnerabilities
Vulnerability details: VCID-7drx-9wnd-pkcx
Vulnerability ID VCID-7drx-9wnd-pkcx
Aliases CVE-2026-25755
GHSA-9vjf-qc39-jprp
Summary jsPDF is a library to generate PDFs in JavaScript. Prior to 4.2.0, user control of the argument of the `addJS` method allows an attacker to inject arbitrary PDF objects into the generated document. By crafting a payload that escapes the JavaScript string delimiter, an attacker can execute malicious actions or alter the document structure, impacting any user who opens the generated PDF. The vulnerability has been fixed in jspdf@4.2.0. As a workaround, escape parentheses in user-provided JavaScript code before passing them to the `addJS` method.
Status Published
Exploitability None
Weighted Severity None
Risk None
Affected and Fixed Packages Package Details
Weaknesses (4)
CWE-94 Improper Control of Generation of Code ('Code Injection')
CWE-116 Improper Encoding or Escaping of Output
CWE-937 OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
CWE-1035 OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
System Score Found at
cvssv3 9.6 https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-25755.json
epss 0.00026 https://api.first.org/data/v1/epss?cve=CVE-2026-25755
cvssv3.1_qr HIGH https://github.com/advisories/GHSA-9vjf-qc39-jprp
cvssv3.1 8.1 https://github.com/parallax/jsPDF
generic_textual HIGH https://github.com/parallax/jsPDF
cvssv3.1 8.1 https://github.com/parallax/jsPDF/commit/56b46d45b052346f5995b005a34af5dcdddd5437
generic_textual HIGH https://github.com/parallax/jsPDF/commit/56b46d45b052346f5995b005a34af5dcdddd5437
ssvc Track https://github.com/parallax/jsPDF/commit/56b46d45b052346f5995b005a34af5dcdddd5437
cvssv3.1 8.1 https://github.com/parallax/jsPDF/releases/tag/v4.2.0
generic_textual HIGH https://github.com/parallax/jsPDF/releases/tag/v4.2.0
ssvc Track https://github.com/parallax/jsPDF/releases/tag/v4.2.0
cvssv3.1 8.1 https://github.com/parallax/jsPDF/security/advisories/GHSA-9vjf-qc39-jprp
cvssv3.1_qr HIGH https://github.com/parallax/jsPDF/security/advisories/GHSA-9vjf-qc39-jprp
generic_textual HIGH https://github.com/parallax/jsPDF/security/advisories/GHSA-9vjf-qc39-jprp
ssvc Track https://github.com/parallax/jsPDF/security/advisories/GHSA-9vjf-qc39-jprp
cvssv3.1 8.1 https://github.com/ZeroXJacks/CVEs/blob/main/2026/CVE-2026-25755.md
generic_textual HIGH https://github.com/ZeroXJacks/CVEs/blob/main/2026/CVE-2026-25755.md
ssvc Track https://github.com/ZeroXJacks/CVEs/blob/main/2026/CVE-2026-25755.md
cvssv3.1 8.1 https://nvd.nist.gov/vuln/detail/CVE-2026-25755
generic_textual HIGH https://nvd.nist.gov/vuln/detail/CVE-2026-25755
Reference id Reference type URL
https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-25755.json
https://api.first.org/data/v1/epss?cve=CVE-2026-25755
https://github.com/parallax/jsPDF
2440993 https://bugzilla.redhat.com/show_bug.cgi?id=2440993
56b46d45b052346f5995b005a34af5dcdddd5437 https://github.com/parallax/jsPDF/commit/56b46d45b052346f5995b005a34af5dcdddd5437
CVE-2026-25755 https://nvd.nist.gov/vuln/detail/CVE-2026-25755
CVE-2026-25755.md https://github.com/ZeroXJacks/CVEs/blob/main/2026/CVE-2026-25755.md
GHSA-9vjf-qc39-jprp https://github.com/advisories/GHSA-9vjf-qc39-jprp
GHSA-9vjf-qc39-jprp https://github.com/parallax/jsPDF/security/advisories/GHSA-9vjf-qc39-jprp
RHSA-2026:7110 https://access.redhat.com/errata/RHSA-2026:7110
RHSA-2026:7128 https://access.redhat.com/errata/RHSA-2026:7128
v4.2.0 https://github.com/parallax/jsPDF/releases/tag/v4.2.0
No exploits are available.
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H Found at https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-25755.json
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N Found at https://github.com/parallax/jsPDF
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N Found at https://github.com/parallax/jsPDF/commit/56b46d45b052346f5995b005a34af5dcdddd5437
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-02-19T17:07:08Z/ Found at https://github.com/parallax/jsPDF/commit/56b46d45b052346f5995b005a34af5dcdddd5437
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N Found at https://github.com/parallax/jsPDF/releases/tag/v4.2.0
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-02-19T17:07:08Z/ Found at https://github.com/parallax/jsPDF/releases/tag/v4.2.0
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N Found at https://github.com/parallax/jsPDF/security/advisories/GHSA-9vjf-qc39-jprp
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-02-19T17:07:08Z/ Found at https://github.com/parallax/jsPDF/security/advisories/GHSA-9vjf-qc39-jprp
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N Found at https://github.com/ZeroXJacks/CVEs/blob/main/2026/CVE-2026-25755.md
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-02-19T17:07:08Z/ Found at https://github.com/ZeroXJacks/CVEs/blob/main/2026/CVE-2026-25755.md
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N Found at https://nvd.nist.gov/vuln/detail/CVE-2026-25755
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Exploit Prediction Scoring System (EPSS)
Percentile 0.07675
EPSS Score 0.00026
Published At June 11, 2026, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2026-06-11T16:41:27.390364+00:00 Vulnrichment Import https://github.com/cisagov/vulnrichment/blob/develop/2026/25xxx/CVE-2026-25755.json 38.6.0