CVE-2025-57810
High
Description
jsPDF is a library to generate PDFs in JavaScript. Prior to 3.0.2, user control of the first argument of the addImage method results in CPU utilization and denial of service. If given the possibility to pass unsanitized image data or URLs to the addImage method, a user can provide a harmful PNG file that results in high CPU utilization and denial of service. The vulnerability was fixed in jsPDF 3.0.2.
SeverityHigh
CVSS7.5
Exploit probability—
Product
Parall Jspdf
PublishedAug 26, 2025
First seenAug 26, 2025
How to fix
Update
- parall jspdf3.0.2 or later
- jspdf3.0.2 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| parall jspdf | v < 3.0.2 | 3.0.2 |
| jspdfnpm | v < 3.0.2 | 3.0.2 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.