PatchTheCVEjspdf vulnerabilities and fixes
Recent CVEs affecting jspdf, with upgrade or downgrade steps. 9 tracked.
jspdf has 9 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 9. Most recent: 2026-03-18. Highest priority: CVE-2025-68428 (score 52/100).
- CVE-2025-68428 HIGH 7.5 UPGRADE jsPDF is a library to generate PDFs in JavaScript
- CVE-2026-31938 CRITICAL 9.6 UPGRADE jsPDF is a library to generate PDFs in JavaScript
- CVE-2026-31898 HIGH 8.1 UPGRADE jsPDF is a library to generate PDFs in JavaScript
- CVE-2026-24737 HIGH 8.1 UPGRADE jsPDF is a library to generate PDFs in JavaScript
- CVE-2026-24133 MEDIUM 6.5 UPGRADE jsPDF is a library to generate PDFs in JavaScript
- CVE-2026-24043 MEDIUM 5.4 UPGRADE jsPDF is a library to generate PDFs in JavaScript
- CVE-2026-24040 MEDIUM 4.8 UPGRADE jsPDF is a library to generate PDFs in JavaScript
- CVE-2025-57810 HIGH 7.5 UPGRADE jsPDF is a library to generate PDFs in JavaScript
- CVE-2025-29907 HIGH 7.5 UPGRADE jsPDF is a library to generate PDFs in JavaScript
FAQ
How do I fix jspdf vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is jspdf being exploited right now?
None of the tracked jspdf CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which jspdf CVE should I patch first?
CVE-2025-68428 currently ranks highest (52/100): jsPDF is a library to generate PDFs in JavaScript.