jspdf vulnerable to Regular Expression Denial of Service (ReDoS)

Description

This affects the package jspdf before 2.3.1. ReDoS is possible via the addImage function.

Recommendation

Update the jspdf package to the latest compatible version. Followings are version details:

Affected version(s): < 2.3.1
Patched version(s): 2.3.1

References

Could your website be exposed too?

SmartScanner can check your website for jspdf vulnerable to Regular Expression Denial of Service (ReDoS) and gives you actionable findings to investigate.

Start a free scan

Related Issues

html-parse-stringify and html-parse-stringify2 vulnerable to Regular expression denial of service (ReDoS) - html-parse-stringify - CVE-2021-23346
html-parse-stringify and html-parse-stringify2 vulnerable to Regular expression denial of service (ReDoS) - CVE-2021-23346
angular vulnerable to regular expression denial of service (ReDoS) - CVE-2022-25844
Regular Expression Denial of Service (ReDoS) in jsx-slack - CVE-2021-43838

How to Secure your NodeJs Express Javascript Application - part 1

How to Secure your NodeJs Express Javascript Application - part 2

10 Secure Coding Best Practices to Follow in Every Project

See something that needs correcting? Let us knowUpdated September 08, 2023