> Critical jsPDF Vulnerability Enables Arbitrary File Read in Node.js (CVE-2025-68428)

In January 2026, a critical security vulnerability was disclosed in jsPDF, a popular JavaScript library used to generate PDF documents. The issue, tracked as CVE-2025-68428, affects server-side Node.js deployments of jsPDF prior to version 4.0.0 and has been assigned a CVSS score of 9.2. The vulnerability is a path traversal issue that can be abused… The post Critical jsPDF Vulnerability Enables Arbitrary File Read in Node.js (CVE-2025-68428) appeared first on Sentrium Security. The post Critical jsPDF Vulnerability Enables Arbitrary File Read in Node.js (CVE-2025-68428) appeared first on Security Boulevard.