Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%

CVE-2026-25755 PoC — jsPDF 安全漏洞

Source
Associated Vulnerability
Title:jsPDF 安全漏洞 (CVE-2026-25755)
Description:jsPDF是Parallax开源的一款基于JavaScript的PDF文档生成库。 jsPDF 4.2.0之前版本存在安全漏洞,该漏洞源于addJS方法对用户输入处理不当,可能导致注入任意PDF对象。
Description
CVE-2026-25755 A critical PDF Object Injection vulnerability in jsPDF allows attackers to inject arbitrary PDF objects through the addJS() function, enabling AcroJS sandbox bypass and automatic script execution when PDFs are opened.
File Snapshot

None
Shenlong Bot has cached this for you
Remarks
    1. It is advised to access via the original source first.
    2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).
    3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.