{"action":"Upgrade jspdf to 4.0.0 or later.","affected":[{"fixed":"4.0.0","introduced":"0"}],"component":"jspdf","cve_ids":["CVE-2025-68428"],"ecosystem":"npm","epss":0.02177,"exploited":false,"fixed_versions":["4.0.0"],"ghsa_id":"GHSA-f8cm-6447-x5h2","id":"tcs_01M5KFN01P2EAX24WZSSTXBQF3","modified_at":"2026-09-10T03:50:32.994197812Z","published_at":"2026-01-05T17:35:29Z","references":["https://osv.dev/vulnerability/GHSA-f8cm-6447-x5h2","https://github.com/parallax/jsPDF/security/advisories/GHSA-f8cm-6447-x5h2","https://nvd.nist.gov/vuln/detail/CVE-2025-68428","https://github.com/parallax/jsPDF/commit/a688c8f479929b24a6543b1fa2d6364abb03066d","https://github.com/parallax/jsPDF","https://github.com/parallax/jsPDF/releases/tag/v4.0.0"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-f8cm-6447-x5h2","url":"https://osv.dev/vulnerability/GHSA-f8cm-6447-x5h2"},{"source":"nvd","source_id":"CVE-2025-68428","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-68428"}],"summary":"jsPDF has Local File Inclusion/Path Traversal vulnerability"}