REDHAT-BUG-2448547: High severity jsPDF jsPDF vulnerability

Published Mar 18, 2026
·
Updated

jsPDF is a library to generate PDFs in JavaScript. Prior to version 4.2.1, user control of arguments of the createAnnotation method allows users to inject arbitrary PDF objects, such as JavaScript actions. If given the possibility to pass unsanitized input to the following method, a user can inject arbitrary PDF objects, such as JavaScript actions, which might trigger when the PDF is opened or interacted with the createAnnotation: color parameter. The vulnerability has been fixed in jsPDF.1. As a workaround, sanitize user input before passing it to the vulnerable API members.

Affected Software

1 affected component
jsPDF jsPDF<4.2.1

Remediation

Recommended actions to resolve this vulnerability, in priority order.

  1. Upgrade

    Upgrade jsPDF.1 to a version that resolves this vulnerability.

    Fixed in 4.2.1
  2. Compensating control

    Sanitize user input before passing it to the vulnerable API method `createAnnotation`, specifically for the `color` parameter (and any other arguments) to prevent injection of arbitrary PDF objects such as JavaScript actions.

Event History

Mar 18, 2026
Data Sourced
via Red Hat·04:04 AM
DescriptionSeverityAffected Software
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Frequently Asked Questions

1

What is the severity of REDHAT-BUG-2448547?

The severity of REDHAT-BUG-2448547 is classified as high with a score of 7.

2

How do I fix REDHAT-BUG-2448547?

To fix REDHAT-BUG-2448547, upgrade jsPDF to version 4.2.1 or later.

3

What is the risk associated with REDHAT-BUG-2448547?

The risk associated with REDHAT-BUG-2448547 is rated at 33, indicating a significant potential impact.

4

What is the main issue with REDHAT-BUG-2448547?

The main issue with REDHAT-BUG-2448547 is that it allows injection of arbitrary PDF objects through unsanitized user input in the createAnnotation method.

5

Which library is affected by REDHAT-BUG-2448547?

The library affected by REDHAT-BUG-2448547 is jsPDF.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203
REDHAT-BUG-2448547 - High severity jsPDF jsPDF vulnerability - SecAlerts