TI-2026-42748 CVE-2026-59941 · GHSA-8hg6-c449-896m
Dompdf: Uncontrolled resource consumption based on declared BMP dimensions
Priority MEDIUM 61
Dompdf is an HTML to PDF converter for PHP.
Vulnerabilities
17 records
TI-2026-42749 CVE-2026-59942 · GHSA-f5gf-2cj8-52g2
Dompdf: Denial of Service (DoS) via Resource Exhaustion using Oversized Image Bitmaps
Priority HIGH 67
Dompdf is an HTML to PDF converter for PHP.
TI-2026-42750 CVE-2026-59943 · GHSA-j8qw-6jw8-r297
Dompdf: Embedded SVG images can leak existence of files and directories within the filesystem
Priority MEDIUM 61
Dompdf is an HTML to PDF converter for PHP.
TI-2026-40895 CVE-2026-56722 · GHSA-cx96-42px-69fm
Dompdf: Local file read due to improper file path validation in SVG images encoded as data-URI
Priority HIGH 67
Dompdf is an HTML to PDF converter for PHP.
TI-2026-40098 CVE-2026-55554 · GHSA-wvh6-f5jh-8gw4
Dompdf: Chroot Validation Bypass
Priority MEDIUM 45
Dompdf is an HTML to PDF converter for PHP.
TI-2026-40099 CVE-2026-55555 · GHSA-7x2p-4jvh-6384
Dompdf: File existence oracle via font-face stylesheet declaration
Priority MEDIUM 45
Dompdf is an HTML to PDF converter for PHP.
TI-2021-02812 CVE-2021-3902 · GHSA-3vjh-xrhf-v9xh
Improper Restriction of XML External Entity Reference in dompdf/dompdf
Priority HIGH 82
An improper restriction of external entities (XXE) vulnerability in dompdf/dompdf's SVG parser allows for Server-Side Request Forgery (SSRF) and deserialization attacks.
TI-2021-02769 CVE-2021-3838 · GHSA-577p-7j7h-2jgf
PHAR Deserialization in dompdf/dompdf
Priority HIGH 82
DomPDF before version 2.0.0 is vulnerable to PHAR deserialization due to a lack of checking on the protocol before passing it into the file_get_contents() function.
TI-2024-16571 CVE-2024-25117 · GHSA-f3qr-qr4x-j273
php-svg-lib lacks path validation on font through SVG inline styles
Priority HIGH 76
php-svg-lib is a scalable vector graphics (SVG) file parsing/rendering library.
TI-2023-27489 CVE-2023-50262 · GHSA-3qx2-6f78-w2j2
Dompdf possible DoS caused by infinite recursion when parsing SVG images
Priority LOW 36
Dompdf is an HTML to PDF converter for PHP.
Priority MEDIUM 63
php-svg-lib is an SVG file parsing / rendering library.
TI-2023-27479 CVE-2023-50251 · GHSA-ff5x-7qg5-vwf2
php-svg-lib possible DoS caused by infinite recursion when parsing SVG document
Priority HIGH 72
php-svg-lib is an SVG file parsing / rendering library.
TI-2023-10313 CVE-2023-24813 · GHSA-56gj-mvh6-rp75
URI validation failure on SVG parsing. Bypass of CVE-2023-23924
Priority HIGH 82
Dompdf is an HTML to PDF converter written in php.
TI-2023-09722 CVE-2023-23924 · GHSA-3cw5-7cxw-v5qg
URI validation failure on SVG parsing in Dompdf
Priority HIGH 82
Dompdf is an HTML to PDF converter.
TI-2022-02215 CVE-2022-2400 · GHSA-5qj8-6xxj-hp9h
External Control of File Name or Path in dompdf/dompdf
Priority LOW 26
External Control of File Name or Path in GitHub repository dompdf/dompdf prior to 2.0.0.
TI-2022-00036 CVE-2022-0085 · GHSA-pf6p-25r2-fx45
Server-Side Request Forgery (SSRF) in dompdf/dompdf
Priority LOW 26
Server-Side Request Forgery (SSRF) in GitHub repository dompdf/dompdf prior to 2.0.0.
TI-2014-01896 CVE-2014-2383 · GHSA-qr6q-w4gj-3865
dompdf.php in dompdf before 0.6.1, when DOMPDF_ENABLE_PHP is enabled, allows…
Priority MEDIUM 57
dompdf.php in dompdf before 0.6.1, when DOMPDF_ENABLE_PHP is enabled, allows context-dependent attackers to bypass chroot protections and read arbitrary files via a PHP protocol and wrappers in the input_file parameter,…