CVEs affecting projects tracked on Release Alert, from NVD & OSV.
This affects the package jspdf before 2.3.1. ReDoS is possible via the addImage function.