search

kempsteven / vue-html2pdf

vue-html2pdf converts any vue component or element into PDF, vue-html2pdf is basically a vue wrapper only and uses html2pdf.js behind the scenes.
https://www.npmjs.com/package/vue-html2pdf
MIT License
432 stars 75 forks source link

jspdf Regular Expression Denial of Service (ReDoS) #165

Open skt1598 opened 1 year ago

skt1598 commented 1 year ago

Describe the bug Introduced through: vue-html2pdf@1.8.0 › html2pdf.js@0.9.3 › jspdf@1.4.1 Affected versions of this package are vulnerable to Regular Expression Denial of Service (ReDoS). ReDoS is possible via the addImage function.

Package Version 1.8.0

Additional context Ref: https://security.snyk.io/vuln/SNYK-JS-JSPDF-1073626