CVE-2026-31938 PUBLISHED CVSS 9.600000381469727 CRITICAL

jsPDF has HTML Injection in New Window paths

EPSS 0.04% · 12.2th percentile

Risk Scores

CVSS v3.1
9.600000381469727
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:L
EPSS Score
0.04%
12.2th percentile

Affected Products

VendorProductVersions
parallaxjsPDF< 4.2.1, < 4.2.1, < 4.2.1
paralljspdf0, 0, 0
npmjspdf0, 0, 0

Timeline

References

Open in Interactive Console →