jsPDF has Local File Inclusion/Path Traversal vulnerability

These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.

CVE-2025-68428 · Microsoft / collected KEV context

EUVD-2026-0847

GHSA-f8cm-6447-x5h2

cve-program · CVE-2025-68428

• https://github.com/parallax/jsPDF/security/advisories/GHSA-f8cm-6447-x5h2
• https://github.com/parallax/jsPDF/commit/a688c8f479929b24a6543b1fa2d6364abb03066d
• https://github.com/parallax/jsPDF/releases/tag/v4.0.0

euvd · EUVD-2026-0847

• https://github.com/parallax/jsPDF/security/advisories/GHSA-f8cm-6447-x5h2
• https://github.com/parallax/jsPDF/commit/a688c8f479929b24a6543b1fa2d6364abb03066d
• https://github.com/parallax/jsPDF/releases/tag/v4.0.0

nvd · CVE-2025-68428

• https://github.com/parallax/jsPDF/commit/a688c8f479929b24a6543b1fa2d6364abb03066d
• https://github.com/parallax/jsPDF/releases/tag/v4.0.0
• https://github.com/parallax/jsPDF/security/advisories/GHSA-f8cm-6447-x5h2
• https://access.redhat.com/errata/RHSA-2026:1517
• https://access.redhat.com/errata/RHSA-2026:2350
• https://access.redhat.com/errata/RHSA-2026:2568
• https://access.redhat.com/security/cve/CVE-2025-68428
• https://bugzilla.redhat.com/show_bug.cgi?id=2427236
• https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-68428.json

osv · GHSA-f8cm-6447-x5h2

• https://github.com/parallax/jsPDF/security/advisories/GHSA-f8cm-6447-x5h2
• https://nvd.nist.gov/vuln/detail/CVE-2025-68428
• https://github.com/parallax/jsPDF/commit/a688c8f479929b24a6543b1fa2d6364abb03066d
• https://github.com/parallax/jsPDF
• https://github.com/parallax/jsPDF/releases/tag/v4.0.0

No related operational record is retained in the current change model.