[jspdf] jsPDF Affected by Client-Side/Server-Side Denial of Service via Malicious GIF Dimensions

**[jspdf] jsPDF Affected by Client-Side/Server-Side Denial of Service via Malicious GIF Dimensions**

Impact User control of the first argument of the addImage method results in denial of service. If given the possibility to pass unsanitized image data or URLs to the addImage method, a user can provide a harmful GIF file that results in out of memory errors and denial of service. Harmful GIF files have large width and/or height entries in their headers, wich lead to excessive memory allocation. Other affected methods are: html. Example attack vector: import { jsPDF } from "jspdf" // malicious GIF image data with large width/height headers const payload = .....

---

**[devsupporter 해설]**

이 기사는 GitHub Security Advisories에서 제공하는 최신 개발 동향입니다. 관련 도구나 기술에 대해 더 알아보시려면 원본 링크를 참고하세요.