CVE-2021-23353 This affects the package jspdf before 2.3.1

Description

This affects the package jspdf before 2.3.1. ReDoS is possible via the addImage function.

Affected products and versions

Product	Affected versions	Fixed in
jspdf 2.3	earliest → < 2.3.1	2.3.1

Other CVEs of jspdf

The 3 CVEs of jspdf →

CVE-2020-7690 All affected versions <2.0.0 of package jspdf are vulnerable to Cross-site Scripting (XSS) Not rated CVE-2020-7691 In all versions of the package jspdf, it is possible to use <<script>script> in order to go over the filtering regex 6.3 Medium