Most recent entries from all

certfr-2026-avi-0834 — De multiples vulnérabilités ont été découvertes dans les produits IBM. Certaines d'entre elles permettent à un attaquan…

certfr-2026-avi-0834

EUVD-2026-364309

fkie_cve-2026-25535

jsPDF is a library to generate PDFs in JavaScript. Prior to 4.2.0, user control of the first argument of the `addImage` method results in denial of service. If given the possibility to pass unsanitized image data or URLs to the `addImage` method, a user can provide a harmful GIF file that results in out of memory errors and denial of service. Harmful GIF files have large width and/or height entries in their headers, which lead to excessive memory allocation. Other affected methods are: `html`. The vulnerability has been fixed in jsPDF 4.2.0. As a workaround, sanitize image data or URLs before passing it to the addImage method or one of the other affected methods.

GHSA-67pg-wm7f-q7fj — jsPDF Affected by Client-Side/Server-Side Denial of Service via Malicious GIF Dimensions

Affected: npm: jspdf

### Impact

User control of the first argument of the `addImage` method results in denial of service.

If given the possibility to pass unsanitized image data or URLs to the `addImage` method, a user can provide a harmful GIF file that results in out of memory errors and denial of service. Harmful GIF files have large width and/or height entries in their headers, wich lead to excessive memory allocation.

Other affected methods are: `html`.

Example attack vector:

```js import { jsPDF } from "jspdf"

// malicious GIF image data with large width/height headers const payload = ...

const doc = new jsPDF();

doc.addImage(payload, "GIF", 0, 0, 100, 100); ```

### Patches

The vulnerability has been fixed in jsPDF 4.1.1. Upgrade to jspdf@>=4.2.0.

### Workarounds

Sanitize image data or URLs before passing it to the addImage method or one of the other affected methods. ### References https://github.com/ZeroXJacks/CVEs/blob/main/2026/CVE-2026-25535.md

RHSA-2026:7110 — Red Hat Security Advisory: RHACS 4.8.10 security and bug fix update

fast-xml-parser: fast-xml-parser has RangeError DoS Numeric Entities Bug jsPDF: denial of service via malicious GIF dimensions jsPDF: PDF object injection via unsanitized input in addJS method fast-xml-parser: fast-xml-parser: Cross-Site Scripting (XSS) due to improper DOCTYPE entity handling jsPDF: PDF injection in AcroForm module allows arbitrary JavaScript execution (RadioButton children) fast-xml-parser: fast-xml-parser: Denial of Service via unlimited XML entity expansion fast-xml-parser: fast-xml-parser: Stack overflow leads to Denial of Service svgo: SVGO: Denial of Service via XML entity expansion jspdf: jsPDF: Arbitrary code execution via unsanitized input in createAnnotation method jspdf: jsPDF: Cross site scripting via unsanitized output options fast-xml-parser: fast-xml-parser: Denial of Service via XML entity expansion bypass google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation

WID-SEC-W-2026-2933 — Splunk SOAR: Mehrere Schwachstellen

Ein Angreifer kann mehrere Schwachstellen in Splunk SOAR ausnutzen, um Sicherheitsvorkehrungen zu umgehen, um Informationen offenzulegen, um Dateien zu manipulieren, um einen SQL-Injection Angriff durchzuführen, um einen Cross-Site Scripting Angriff durchzuführen, und um beliebigen Programmcode auszuführen.