DO
Product
dompdf
by dompdf · last CVE Jul 28, 2026
10
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 5Medium 2Low 0
Watch

Add dompdf to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-59941
7.5
1%
Jul 28
Dompdf: Uncontrolled resource consumption based on declared BMP dimensions
Affected: < 3.1.6
CVE-2026-59942
7.5
1%
Jul 28
Dompdf: Denial of Service (DoS) via Resource Exhaustion using Oversized Image Bitmaps
Affected: < 3.1.6
CVE-2026-55554
7.5
0%
Jul 28
Dompdf: Chroot Validation Bypass
Affected: < 3.1.6
CVE-2026-55555
7.5
1%
Jul 28
Dompdf: File existence oracle via font-face stylesheet declaration
Affected: < 3.1.6
CVE-2023-50262
7.5
1%
Dec 13
Dompdf possible DoS caused by infinite recursion when parsing SVG images
Affected: < 2.0.4
Showing 5