Login Request a demo
DO
Product
Dompdf
by Dompdf Project · last CVE Jul 28, 2026
18
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities18In the news0Timeline
Severity mix
Critical 5High 7Medium 6Low 0
Severity
All severities18Critical5High7Medium6Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Dompdf to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2014-5013
8.8
4%
Jan 10
DOMPDF before 0.6.2 allows remote code execution, a related issue to CVE-2014-2383
Affected: before 0.6.2
CVE-2026-59941
7.5
1%
Jul 28
Dompdf: Uncontrolled resource consumption based on declared BMP dimensions
Affected: before 3.1.6
CVE-2026-59942
7.5
1%
Jul 28
Dompdf: Denial of Service (DoS) via Resource Exhaustion using Oversized Image Bitmaps
Affected: before 3.1.6
CVE-2026-55554
7.5
0%
Jul 28
Dompdf: Chroot Validation Bypass
Affected: before 3.1.6
CVE-2026-55555
7.5
1%
Jul 28
Dompdf: File existence oracle via font-face stylesheet declaration
Affected: before 3.16
CVE-2023-50262
7.5
1%
Dec 13
Dompdf possible DoS caused by infinite recursion when parsing SVG images
Affected: through 2.0.3
CVE-2022-41343
7.5
6%
Sep 25
registerFont in FontMetrics.php in Dompdf before 2.0.1 allows remote file inclusion because a URI validation failure does not halt font registration, as demonstrated by a…
Affected: before 2.0.1
Showing 7