Critical jsPDF vulnerability enables arbitrary file read in Node.js deployments – CSO Online
A now-fixed critical flaw in the jsPDF library could enable attackers to extract sensitive files from enterprise servers and embed them directly into generated PDF documents. Tracked as CVE-2025-68428, the…