dompdf

Top products

The 11 most recently published vulnerabilities affecting dompdf.

• CVE-2021-3902Improper Restriction of XML External Entity Reference in dompdf/dompdf9.8Nov 15, 2024
• CVE-2021-3838PHAR Deserialization in dompdf/dompdf9.8Nov 15, 2024
• CVE-2024-25117php-svg-lib lacks path validation on font through SVG inline styles 6.8Feb 21, 2024
• CVE-2023-50262Dompdf possible DoS caused by infinite recursion when parsing SVG images5.3Dec 13, 2023
• CVE-2023-50252php-svg-lib unsafe attributes merge when parsing `use` tag8.3Dec 12, 2023
• CVE-2023-50251php-svg-lib possible DoS caused by infinite recursion when parsing SVG document5.3Dec 12, 2023
• CVE-2023-24813URI validation failure on SVG parsing. Bypass of CVE-2023-2392410.0Feb 7, 2023
• CVE-2023-23924URI validation failure on SVG parsing in Dompdf10.0Jan 31, 2023
• CVE-2022-2400External Control of File Name or Path in dompdf/dompdf5.3Jul 18, 2022
• CVE-2022-0085Server-Side Request Forgery (SSRF) in dompdf/dompdf5.3Jun 28, 2022
• CVE-2014-2383dompdf.php in dompdf before 0.6.1, when DOMPDF_ENABLE_PHP is enabled, allows context-dependent attackers to bypass chroot protections and read arbitrary files via a PHP protocol and wrappers in the...6.8Apr 28, 2014