jsPDF Affected by Client-Side/Server-Side Denial of Service via Malicious GIF Dimensions

Description

User control of the first argument of the addImage method results in denial of service.

If given the possibility to pass unsanitized image data or URLs to the addImage method, a user can provide a harmful GIF file that results in out of memory errors and denial of service.

Recommendation

Update the jspdf package to the latest compatible version. Followings are version details:

• Affected version(s): < 4.2.0
• Patched version(s): 4.2.0

References

• GHSA-67pg-wm7f-q7fj
• CVE-2026-25535
• CWE-770
• CAPEC-310
• OWASP 2021-A6

Related Issues

• Parse Server: Pre-authentication denial of service via client version header regex backtracking - CVE-2026-47138
• Parse Server affected by denial-of-service via unbounded query complexity in REST and GraphQL API - CVE-2026-30946
• jsPDF Vulnerable to Denial of Service (DoS) via Unvalidated BMP Dimensions in BMPDecoder - CVE-2026-24133
• Signal K Server has an Unauthenticated Regular Expression Denial of Service (ReDoS) via WebSocket Subscription Paths - CVE-2026-39320

You might also like:

Exploiting Server Version Disclosure

10 Secure Coding Best Practices to Follow in Every Project

Update Cheat Sheet for Developers

Tags:

npm

jspdf