{"action":"Upgrade jspdf to 2.0.0 or later.","affected":[{"fixed":"2.0.0","introduced":"0"}],"component":"jspdf","cve_ids":["CVE-2020-7690"],"ecosystem":"npm","epss":0.00968,"exploited":false,"fixed_versions":["2.0.0"],"ghsa_id":"GHSA-vh59-v9r5-4mh4","id":"tcs_01M5KGBY53YW3H142124Y0F7NB","modified_at":"2026-07-08T06:49:56.653304789Z","published_at":"2021-05-17T21:01:32Z","references":["https://osv.dev/vulnerability/GHSA-vh59-v9r5-4mh4","https://nvd.nist.gov/vuln/detail/CVE-2020-7690","https://github.com/MrRio/jsPDF/issues/2795","https://github.com/parallax/jsPDF/issues/2862","https://github.com/parallax/jsPDF/issues/2971","https://github.com/parallax/jsPDF/pull/2806","https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARS-575260","https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSBOWER-575258","https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSBOWERGITHUBMRRIO-575259","https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-575257","https://snyk.io/vuln/SNYK-JS-JSPDF-575256"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"GHSA-vh59-v9r5-4mh4","url":"https://osv.dev/vulnerability/GHSA-vh59-v9r5-4mh4"}],"summary":"Cross-site scripting in jspdf"}