Vulnerabilities in parallax
13 resultsCVE-2025-68428CRITICALjsPDF has Local File Inclusion/Path Traversal vulnerabilityEPSS 2.2%CVE-2026-25755HIGHjsPDF has PDF Object Injection via Unsanitized Input in addJS MethodEPSS 1.0%CVE-2026-25535HIGHjsPDF Affected by Client-Side/Server-Side Denial of Service via Malicious GIF DimensionsEPSS 0.8%CVE-2025-29907HIGHjsPDF Bypass Regular Expression Denial of Service (ReDoS)EPSS 0.7%CVE-2025-57810HIGHjsPDF Parsing of Corrupt PNGs Leads to Potential Denial of Service (DoS)EPSS 0.7%CVE-2026-24133HIGHjsPDF Affected by Denial of Service (DoS) via Unvalidated BMP Dimensions in BMPDecoderEPSS 0.6%CVE-2026-24737HIGHjsPDF has a PDF Injection in AcroFormChoiceField which allows Arbitrary JavaScript ExecutionEPSS 0.6%CVE-2026-25940HIGHjsPDF's PDF Injection in AcroForm module allows Arbitrary JavaScript Execution (RadioButton.createOption and "AS" property)EPSS 0.5%CVE-2026-90943CRITICALparallax filament-comments through 3.0.0 Stored XSS via Comment BodyEPSS 0.4%CVE-2026-31898HIGHjsPDF has a PDF Object Injection via FreeText colorEPSS 0.4%CVE-2026-24043MEDIUMjsPDF Affected by Stored XMP Metadata Injection (Spoofing & Integrity Violation)EPSS 0.3%CVE-2026-31938CRITICALjsPDF has HTML Injection in New Window pathsEPSS 0.3%CVE-2026-24040MEDIUMjsPDF has a Shared State Race Condition in addJS PluginEPSS 0.3%