CVE-2021-23353: Regular Expression Denial of Service (ReDoS)
This affects the package jspdf before 2.3.1. ReDoS is possible via the addImage function.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is CVE-2021-23353?
CVE-2021-23353 is a vulnerability that affects the package jspdf before version 2.3.1, allowing for Denial-of-Service attacks through the addImage function.
How does CVE-2021-23353 impact jspdf?
CVE-2021-23353 can result in ReDoS (Regular Expression Denial of Service) attacks when the addImage function is used in jspdf.
What is the severity of CVE-2021-23353?
CVE-2021-23353 has a severity score of 7.5 (High).
How can I fix CVE-2021-23353?
To fix CVE-2021-23353, update jspdf to version 2.3.1 or higher.
Where can I find more information about CVE-2021-23353?
You can find more information about CVE-2021-23353 at the following references: [NVD](https://nvd.nist.gov/vuln/detail/CVE-2021-23353), [GitHub Pull Request](https://github.com/MrRio/jsPDF/pull/3091), [GitHub Commit](https://github.com/MrRio/jsPDF/commit/d8bb3b39efcd129994f7a3b01b632164144ec43e).