THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2026-24737 (HIGH 8.1) — jsPDF is a library to generate PDFs in JavaScript. Prior to 4.1.0, user control of properties and methods of the Acroform module allows users to inject arbitrary PDF objects, such as JavaScript actions. If given the possibility to pass unsanitized input to one of the following me

[NVD] CVE-2026-24737 (HIGH 8.1) — jsPDF is a library to generate PDFs in JavaScript. Prior to 4.1.0, user control of properties and methods of the Acroform module allows users to inject arbitrary PDF objects, such as JavaScript actions. If given the possibility to pass unsanitized input to one of the following me

lownvdPublished 2026-02-02

CVE-2026-24737 CVSS: 8.1 HIGH Published: 2026-02-02T23:16:08.443

jsPDF is a library to generate PDFs in JavaScript. Prior to 4.1.0, user control of properties and methods of the Acroform module allows users to inject arbitrary PDF objects, such as JavaScript actions. If given the possibility to pass unsanitized input to one of the following methods or properties, a user can inject arbitrary PDF o

MITRE ATT&CK techniques

JavaScriptT1059.007

Indicators of compromise

CVE-2026-24737cve

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-24737