Critical jsPDF flaw lets hackers steal secrets via generated PDFs

Published on January 7, 2026

The jsPDF library for generating PDF documents in JavaScript applications is vulnerable to a critical vulnerability that allows an attacker to steal sensitive data from the local filesystem by including it in generated files. [...]