CVE-2025-57810

Name of the Vulnerable Software and Affected Versions: jsPDF versions prior to 3.0.2

Description: jsPDF is a JavaScript library used to generate PDFs. Prior to version 3.0.2, user control over the first argument of the addImage method can lead to high CPU utilization and denial of service. Providing unsanitized image data or URLs to the addImage method allows a user to supply a malicious PNG file, resulting in excessive CPU usage and a denial-of-service condition.

Recommendations: Update to jsPDF version 3.0.2 or later.