Parallax vulnerabilities

Products

• Jspdf 15

Newest

• parallax filament-comments parallax filament-comments through 3.0.0 Stored XSS via Comment Body CVE-2026-90943 9.3 CriticalSeptember 14, 2026
• parall jspdf, red hat advanced cluster security 4.8, advanced cluster security 4.9 +2 more jsPDF has HTML Injection in New Window paths CVE-2026-31938 Fix available 9.6 CriticalMarch 17, 2026
• parall jspdf, red hat advanced cluster security 4.8, advanced cluster security 4.9 +2 more jsPDF has a PDF Object Injection via FreeText color CVE-2026-31898 Fix available 8.1 HighMarch 17, 2026
• parall jspdf, red hat advanced cluster security 4.8, advanced cluster security 4.9 +2 more jsPDF's PDF Injection in AcroForm module allows Arbitrary JavaScript Execution (RadioButton.createOption and "AS" property) CVE-2026-25940 Public exploitFix available 8.1 HighFebruary 19, 2026
• parall jspdf, red hat advanced cluster security 4.8, advanced cluster security 4.9 +2 more jsPDF has PDF Object Injection via Unsanitized Input in addJS Method CVE-2026-25755 Public exploitFix available 8.1 HighFebruary 19, 2026
• parall jspdf, red hat advanced cluster security 4.8, advanced cluster security 4.9 +2 more jsPDF Affected by Client-Side/Server-Side Denial of Service via Malicious GIF Dimensions CVE-2026-25535 Fix available 8.7 HighFebruary 19, 2026
• parall jspdf, red hat advanced cluster security 4, advanced cluster security 4.8 +1 more +3 more jsPDF has a PDF Injection in AcroFormChoiceField which allows Arbitrary JavaScript Execution CVE-2026-24737 Fix available 8.1 HighFebruary 2, 2026
• parall jspdf jsPDF Affected by Denial of Service (DoS) via Unvalidated BMP Dimensions in BMPDecoder CVE-2026-24133 Fix available 8.7 HighFebruary 2, 2026
• parall jspdf jsPDF Affected by Stored XMP Metadata Injection (Spoofing & Integrity Violation) CVE-2026-24043 Fix available 6.9 MediumFebruary 2, 2026
• parall jspdf jsPDF has a Shared State Race Condition in addJS Plugin CVE-2026-24040 Fix available 6.3 MediumFebruary 2, 2026
• parall jspdf, red hat advanced cluster security 4, advanced cluster security 4.8 +1 more +3 more jsPDF has Local File Inclusion/Path Traversal vulnerability CVE-2025-68428 Public exploitFix available 9.2 CriticalJanuary 5, 2026
• parall jspdf jsPDF Parsing of Corrupt PNGs Leads to Potential Denial of Service (DoS) CVE-2025-57810 Fix available 8.7 HighAugust 26, 2025
• parall jspdf jsPDF Bypass Regular Expression Denial of Service (ReDoS) CVE-2025-29907 Fix available 8.7 HighMarch 18, 2025
• parall jspdf Regular Expression Denial of Service (ReDoS) CVE-2021-23353 Fix available 5.9 MediumMarch 9, 2021
• parall jspdf Cross-site scripting in jspdf CVE-2020-7690 Fix available 6.1 MediumJuly 6, 2020
• parall jspdf Cross-site Scripting (XSS) CVE-2020-7691 Fix available 6.3 MediumJuly 6, 2020