Pparallax

Products

Exploited and recent CVEs

• CVE-2026-90943 High 8.7 parallax filament-comments through 3.0.0 Stored XSS via Comment Body 0.4%
• CVE-2026-31938 Critical 9.6 jsPDF has HTML Injection in New Window paths 0.3%
• CVE-2026-31898 High 8.1 jsPDF has a PDF Object Injection via FreeText color 0.4%
• CVE-2026-25940 High 8.1 jsPDF's PDF Injection in AcroForm module allows Arbitrary JavaScript Execution (RadioButton.createOption and "AS" property) 0.5%
• CVE-2026-25755 High 8.1 jsPDF has PDF Object Injection via Unsanitized Input in addJS Method 1.0%
• CVE-2026-25535 High 7.5 jsPDF Affected by Client-Side/Server-Side Denial of Service via Malicious GIF Dimensions 0.8%
• CVE-2026-24040 Medium 6.3 jsPDF has a Shared State Race Condition in addJS Plugin 0.3%
• CVE-2026-24043 Medium 6.9 jsPDF Affected by Stored XMP Metadata Injection (Spoofing & Integrity Violation) 0.3%
• CVE-2026-24133 High 8.7 jsPDF Affected by Denial of Service (DoS) via Unvalidated BMP Dimensions in BMPDecoder 0.6%
• CVE-2026-24737 High 8.1 jsPDF has a PDF Injection in AcroFormChoiceField which allows Arbitrary JavaScript Execution 0.6%
• CVE-2025-68428 High 8.6 jsPDF has Local File Inclusion/Path Traversal vulnerability 2.2%
• CVE-2025-57810 High 8.7 jsPDF Parsing of Corrupt PNGs Leads to Potential Denial of Service (DoS) 0.7%
• CVE-2025-29907 High 8.7 jsPDF Bypass Regular Expression Denial of Service (ReDoS) 0.7%