Components Vulnerabilities Security Events Pricing MCP API

Find vulnerabilities. Fix fast with AI.

Search components by package, version, or CVE to get started.

org.uberfire/uberfire-commons-editor-clien… | Sonatype Guide

Get full component data and automated fixes with Sonatype Guide.

Sign up for free

uberfire-commons-editor-client

7.74.1.Final

uberfire-commons-editor-client 7.74.1.Final

Latest

org.uberfire

PublishedJul 13, 2023•Policy

compliance

Developer Trust Score

Recommended Version:x.y.z

Recommended upgrade that meets your policy.

Compare Versions

Severity

Critical (0)

High (0)

Medium (3)

Low (0)

CVSS Score

0.010.0

EPSS Score

0.01.0

Malware

KEV StatusPublished

4.8CVE-2026-24040

jsPDF is a library to generate PDFs in JavaScript. Prior to 4.1.0, the addJS method in the jspdf Node.js build utilizes a shared module-scoped variable (text) to store JavaScript content. When used in a concurrent environment (e.g., a Node.js web server), this variable is shared across all requests. If multiple requests generate PDFs simultaneously, the JavaScript content intended for one user may be overwritten by a subsequent request before the document is generated. This results in Cross-User Data Leakage, where the PDF generated for User A contains the JavaScript payload (and any embedded sensitive data) intended for User B. Typically, this only affects server-side environments, although the same race conditions might occur if jsPDF runs client-side. The vulnerability has been fixed in jsPDF@4.1.0.

PublishedFeb 4, 2026

6.1CVE-2020-7691

In all versions of the package jspdf, it is possible to use <<script>script> in order to go over the filtering regex.

PublishedJul 7, 2020

6.1CVE-2020-7690

All affected versions <2.0.0 of package jspdf are vulnerable to Cross-site Scripting (XSS). It is possible to inject JavaScript code via the html method.

PublishedJul 7, 2020