Recent Commits to jsPDF:master

  • 19/02/2026 7:01

    4.2.0

    4.2.0
  • 19/02/2026 6:37

    Merge commit from fork

    Merge commit from fork
    
    * Sanitize JavaScript input in addJS function
    
    Sanitize input JavaScript to prevent errors with parentheses.
    
    * don't escape already escaped parentheses, add test cases
    
    ---------
    
    Co-authored-by: Lukas Holländer <lukas.hollaender@yworks.com>
  • 19/02/2026 6:37

    Merge commit from fork

    Merge commit from fork
  • 19/02/2026 6:37

    Merge commit from fork

    Merge commit from fork
    
    * fix
    
    * fix
    
    * add regression tests and revert dist changes
    
    * prettier
    
    ---------
    
    Co-authored-by: Lukas Holländer <lukas.hollaender@yworks.com>
  • 09/02/2026 6:59

    fix: upgrade @babel/runtime from 7.28.4 to 7.28.6 (#3954)

    fix: upgrade @babel/runtime from 7.28.4 to 7.28.6 (#3954)
    
    Snyk has created this PR to upgrade @babel/runtime from 7.28.4 to 7.28.6.
    
    See this package in npm:
    @babel/runtime
    
    See this project in Snyk:
    https://app.snyk.io/org/mrrio/project/50515eb1-b03b-4f42-9f17-cce1a33d5d1a?utm_source=github&utm_medium=referral&page=upgrade-pr
    
    Co-authored-by: snyk-bot <snyk-bot@snyk.io>
  • 04/02/2026 10:56

    Add default export to package.json (#3953)

    Add default export to package.json (#3953)
  • 02/02/2026 7:45

    4.1.0

    4.1.0
  • 02/02/2026 7:27

    Merge commit from fork

    Merge commit from fork
    
    * limit buffer allocation size when parsing BMP images
    
    * document addImage might throw errors
  • 02/02/2026 7:27

    Merge commit from fork

    Merge commit from fork
    
    Move module-level variables (text, jsNamesObj, jsJsObj) inside addJS
    function scope to prevent data leakage when multiple jsPDF instances
    call addJS() before save().
    
    Fixes shared state vulnerability where docA.save() would contain
    docB's script if docB.addJS() was called after docA.addJS().
    
    Co-authored-by: root <root@DESKTOP-PC8VOAS.localdomain>
  • 02/02/2026 7:26

    Merge commit from fork

    Merge commit from fork
  • 02/02/2026 7:26

    Merge commit from fork

    Merge commit from fork
    
    * Fix PDF Injection vulnerability in AcroForm (ChoiceField, CheckBox, RadioButton)
    
    * Apply review suggestions: Improved hex escaping
    
    * Test: Add PDF injection tests
    
    * fix test cases, formatting
    
    ---------
    
    Co-authored-by: kali <kali@kali.kali>
    Co-authored-by: Lukas Holländer <lukas.hollaender@yworks.com>

Log in