Login Request a demo
DO
Product
Dompdf
by Dompdf Project · last CVE Jul 28, 2026
18
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities18In the news0Timeline
Severity mix
Critical 5High 7Medium 6Low 0
Severity
All severities18Critical5High7Medium6Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Dompdf to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2014-5012
6.5
1%
Jan 10
DOMPDF before 0.6.2 allows denial of service
Affected: before 0.6.2
CVE-2014-5011
6.5
1%
Jan 10
DOMPDF before 0.6.2 allows Information Disclosure
Affected: before 0.6.2
CVE-2026-59943
5.3
0%
Jul 28
Dompdf: Embedded SVG images can leak existence of files and directories within the filesystem
Affected: before 3.1.6
CVE-2026-56722
5.3
0%
Jul 28
Dompdf: Local file read due to improper file path validation in SVG images encoded as data-URI
Affected: before 3.1.6
CVE-2022-2400
5.3
1%
Jul 18
External Control of File Name or Path in GitHub repository dompdf/dompdf prior to 2.0.0
Affected: before 2.0.0
CVE-2022-0085
5.3
1%
Jun 28
Server-Side Request Forgery (SSRF) in GitHub repository dompdf/dompdf prior to 2.0.0
Affected: before 2.0.0
Showing 6