JsPDF Security Update Advisory (CVE-2025-68428)

Overview

 

We have released a security update to address a vulnerability in jsPDF. Users of affected products are advised to update to the latest version.
 

 

Affected Products

 

CVE-2025-68428

 

jspdf Version: 3.0.4 and earlier

 

 

Resolved Vulnerabilities

 

Local file inclusion and path manipulation vulnerability in jsPDF (CVE-2025-68428)

 

 

Vulnerability Patches

Vulnerability Patches have been made available in the latest update. Please follow the instructions on the Referenced Sites to update to the latest Vulnerability Patches version.

 

CVE-2025-68428

 

jspdf version: 4.0.0 or later

 

 

References

 

[1] Local File Inclusion/Path Traversal
https://github.com/parallax/jsPDF/security/advisories/GHSA-f8cm-6447-x5h2