Description
The following security vulnerability was identified in jsPDF versions <=3.0.4: Local File Inclusion/Path Traversal.
Recommendation
Update the survey-pdf package to the latest compatible version. Followings are version details:
Affected version(s): **>= 2.0.0, <= 2.5.4 <= 1.12.58** Patched version(s): **2.5.5 1.12.59**
References
Could your website be exposed too?
SmartScanner can check your website for survey-pdf Upgraded jsPDF Version Due to Security Vulnerability and gives you actionable findings to investigate.
Start a free scanRelated Issues
- ngx-extended-pdf-viewer bundles a version of pdf.js vulnerable to CVE-2026-16633 - Vulnerability
- Electerm Security Vulnerability: RCE via malicious SSH server filename in openFileWithEditor - CVE-2026-43943
- jsPDF has PDF Injection in AcroFormChoiceField that allows Arbitrary JavaScript Execution - CVE-2026-24737
- jsPDF has a PDF Object Injection via Unsanitized Input in addJS Method - CVE-2026-25755
You might also like:
See something that needs correcting? Let us knowUpdated February 05, 2026