All affected versions <2.0.0 of package jspdf are vulnerable to Cross-site Scripting (XSS). It is possible to inject JavaScript code via the html method.Referenceshttps://snyk.io/vuln/SNYK-JS-JSPDF-575256https://github.com/MrRio/jsPDF/issues/2795