#jsPDF: Critical Path Traversal Vulnerability (CVE-2025-68428) in jsPDF - a widely-adopted #npm package for generating PDF documents in JavaScript applications allows attackers to read & exfiltrate arbitrary files from the local filesystem:
👇
https://www.endorlabs.com/learn/cve-2025-68428-critical-path-traversal-in-jspdf
Sam Stepanyan :verified: 🐘
npub1gr…9gp67
2026-01-07 17:43:51 UTC
Author Public Key
npub1gr8f0c2al23r8wpv2v7vt2na36g3xnpz06pceqhrysmlg8gahyjqp9gp67Seen on
wss://relay.momostr.pinkPublished at
2026-01-07 17:43:51 UTCEvent JSON
{
"id": "570537521c2599a8d912da61ab12be42b3acd0ae927c61e4940eb879c030f753",
"pubkey": "40ce97e15dfaa233b82c533cc5aa7d8e91134c227e838c82e32437f41d1db924",
"created_at": 1767807831,
"kind": 1,
"tags": [
[
"t",
"npm"
],
[
"t",
"jspdf"
],
[
"proxy",
"https://infosec.exchange/@securestep9/115855054029984195",
"web"
],
[
"proxy",
"https://infosec.exchange/users/securestep9/statuses/115855054029984195",
"activitypub"
],
[
"L",
"pink.momostr"
],
[
"l",
"pink.momostr.activitypub:https://infosec.exchange/users/securestep9/statuses/115855054029984195",
"pink.momostr"
],
[
"-"
]
],
"content": "#jsPDF: Critical Path Traversal Vulnerability (CVE-2025-68428) in jsPDF - a widely-adopted #npm package for generating PDF documents in JavaScript applications allows attackers to read \u0026 exfiltrate arbitrary files from the local filesystem:\n👇\nhttps://www.endorlabs.com/learn/cve-2025-68428-critical-path-traversal-in-jspdf",
"sig": "c1122efdd47b49037cbee4c2e99712df9f3e6a5cc1125d9f7036bee5c03b1871dd72bff71504cefb741ffa731a3a6ebf9a7d3c10652ed39eb39718df135de5e5"
}