CVE-2026-24043
Fixed in a distro release EPSS <1%CVSS 6.9
jsPDF is a library to generate PDFs in JavaScript. Prior to 4.1.0, user control of the first argument of the addMetadata function allows users to inject arbitrary XML. If given the possibility to pass unsanitized input to the addMetadata method, a user can inject arbitrary XMP metadata into the generated PDF. If the generated PDF is signed, stored or otherwise processed after, the integrity of the PDF can no longer be guaranteed. The vulnerability has been fixed in jsPDF@4.1.0.
Products: parallax jsPDF
Fixed upstream
| Ecosystem | Package | Fixed in |
|---|---|---|
| npm | jspdf | 4.1.0 |
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Chainguard | opensearch-dashboards-2-alerting-dashboards-plugin | 2.19.4-r7 |
| Chainguard | opensearch-dashboards-2-anomaly-detection-dashboards-plugin | 2.19.4-r7 |
| Chainguard | opensearch-dashboards-2-dashboards-maps | 2.19.4-r7 |
| Chainguard | opensearch-dashboards-2-dashboards-notifications | 2.19.4-r7 |
| Chainguard | opensearch-dashboards-2-dashboards-observability | 2.19.4-r7 |
| Chainguard | opensearch-dashboards-2-dashboards-query-workbench | 2.19.4-r7 |
| Chainguard | opensearch-dashboards-2-dashboards-reporting | 2.19.4-r7 |
| Chainguard | opensearch-dashboards-2-dashboards-search-relevance | 2.19.4-r7 |
| Chainguard | opensearch-dashboards-2-dashboards-visualizations | 2.19.4-r7 |
| Chainguard | opensearch-dashboards-2-fips-alerting-dashboards-plugin | 2.19.4-r7 |
| Chainguard | opensearch-dashboards-2-fips-anomaly-detection-dashboards-plugin | 2.19.4-r7 |
| Chainguard | opensearch-dashboards-2-fips-dashboards-maps | 2.19.4-r7 |
| Chainguard | opensearch-dashboards-2-fips-dashboards-notifications | 2.19.4-r7 |
| Chainguard | opensearch-dashboards-2-fips-dashboards-observability | 2.19.4-r7 |
| Chainguard | opensearch-dashboards-2-fips-dashboards-query-workbench | 2.19.4-r7 |
| Chainguard | opensearch-dashboards-2-fips-dashboards-reporting | 2.19.4-r7 |
| Chainguard | opensearch-dashboards-2-fips-dashboards-search-relevance | 2.19.4-r7 |
| Chainguard | opensearch-dashboards-2-fips-dashboards-visualizations | 2.19.4-r7 |
| Chainguard | opensearch-dashboards-2-fips-index-management-dashboards-plugin | 2.19.4-r7 |
| Chainguard | opensearch-dashboards-2-fips-ml-commons-dashboards | 2.19.4-r7 |
| Chainguard | opensearch-dashboards-2-fips-security-analytics-dashboards-plugin | 2.19.4-r7 |
| Chainguard | opensearch-dashboards-2-fips-security-dashboards-plugin | 2.19.4-r7 |
| Chainguard | opensearch-dashboards-2-index-management-dashboards-plugin | 2.19.4-r7 |
| Chainguard | opensearch-dashboards-2-ml-commons-dashboards | 2.19.4-r7 |
| Chainguard | opensearch-dashboards-2-security-analytics-dashboards-plugin | 2.19.4-r7 |
| Chainguard | opensearch-dashboards-2-security-dashboards-plugin | 2.19.4-r7 |
| Chainguard | opensearch-dashboards-3-alerting-dashboards-plugin | 3.4.0-r2 |
| Chainguard | opensearch-dashboards-3-anomaly-detection-dashboards-plugin | 3.4.0-r2 |
| Chainguard | opensearch-dashboards-3-dashboards-maps | 3.4.0-r2 |
| Chainguard | opensearch-dashboards-3-dashboards-notifications | 3.4.0-r2 |
| Chainguard | opensearch-dashboards-3-dashboards-observability | 3.4.0-r2 |
| Chainguard | opensearch-dashboards-3-dashboards-query-workbench | 3.4.0-r2 |
| Chainguard | opensearch-dashboards-3-dashboards-reporting | 3.4.0-r2 |
| Chainguard | opensearch-dashboards-3-dashboards-search-relevance | 3.4.0-r2 |
| Chainguard | opensearch-dashboards-3-fips-alerting-dashboards-plugin | 3.4.0-r3 |
| Chainguard | opensearch-dashboards-3-fips-anomaly-detection-dashboards-plugin | 3.4.0-r3 |
| Chainguard | opensearch-dashboards-3-fips-dashboards-maps | 3.4.0-r3 |
| Chainguard | opensearch-dashboards-3-fips-dashboards-notifications | 3.4.0-r3 |
| Chainguard | opensearch-dashboards-3-fips-dashboards-observability | 3.4.0-r3 |
| Chainguard | opensearch-dashboards-3-fips-dashboards-query-workbench | 3.4.0-r3 |
| Chainguard | opensearch-dashboards-3-fips-dashboards-reporting | 3.4.0-r3 |
| Chainguard | opensearch-dashboards-3-fips-dashboards-search-relevance | 3.4.0-r3 |
| Chainguard | opensearch-dashboards-3-fips-index-management-dashboards-plugin | 3.4.0-r3 |
| Chainguard | opensearch-dashboards-3-fips-ml-commons-dashboards | 3.4.0-r3 |
| Chainguard | opensearch-dashboards-3-fips-security-analytics-dashboards-plugin | 3.4.0-r3 |
| Chainguard | opensearch-dashboards-3-fips-security-dashboards-plugin | 3.4.0-r3 |
| Chainguard | opensearch-dashboards-3-index-management-dashboards-plugin | 3.4.0-r2 |
| Chainguard | opensearch-dashboards-3-ml-commons-dashboards | 3.4.0-r2 |
| Chainguard | opensearch-dashboards-3-security-analytics-dashboards-plugin | 3.4.0-r2 |
| Chainguard | opensearch-dashboards-3-security-dashboards-plugin | 3.4.0-r2 |
| Wolfi | opensearch-dashboards-3-alerting-dashboards-plugin | 3.4.0-r2 |
| Wolfi | opensearch-dashboards-3-anomaly-detection-dashboards-plugin | 3.4.0-r2 |
| Wolfi | opensearch-dashboards-3-dashboards-maps | 3.4.0-r2 |
| Wolfi | opensearch-dashboards-3-dashboards-notifications | 3.4.0-r2 |
| Wolfi | opensearch-dashboards-3-dashboards-observability | 3.4.0-r2 |
| Wolfi | opensearch-dashboards-3-dashboards-query-workbench | 3.4.0-r2 |
| Wolfi | opensearch-dashboards-3-dashboards-reporting | 3.4.0-r2 |
| Wolfi | opensearch-dashboards-3-dashboards-search-relevance | 3.4.0-r2 |
| Wolfi | opensearch-dashboards-3-index-management-dashboards-plugin | 3.4.0-r2 |
| Wolfi | opensearch-dashboards-3-ml-commons-dashboards | 3.4.0-r2 |
| Wolfi | opensearch-dashboards-3-security-analytics-dashboards-plugin | 3.4.0-r2 |
| Wolfi | opensearch-dashboards-3-security-dashboards-plugin | 3.4.0-r2 |