DO
Product
Dompdf
18
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 5High 7Medium 6Low 0
Watch
Add Dompdf to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-3902 | 9.8 | Nov 15 | Improper Restriction of XML External Entity Reference in dompdf/dompdf Affected: before 2.0.0 |
| CVE-2021-3838 | 9.8 | Nov 15 | PHAR Deserialization in dompdf/dompdf Affected: before 2.0.0 |
| CVE-2023-24813 | 9.8 | Feb 7 | Dompdf is an HTML to PDF converter written in php Affected: 2.0.2 |
| CVE-2023-23924 | 9.8 | Feb 1 | Dompdf is an HTML to PDF converter Affected: 2.0.1 |
| CVE-2022-28368 | 9.8 | Apr 3 | Dompdf 1.2.1 allows remote code execution via a .php file in the src:url field of an @font-face Cascading Style Sheets (CSS) statement (within an HTML input file) Affected: before 1.2.1 |
Showing 5