Critical jsPDF flaw lets hackers steal secrets via generated PDFs
From BleepingComputer to All on Wed Jan 7 17:36:59 2026
The jsPDF library for generating PDF documents in JavaScript applications is vulnerable to a critical vulnerability that allows an attacker to steal sensitive data from the local filesystem by including it in generated files. [...]