MP
Product
Mpdf
by Mpdf Project · last CVE Jan 13, 2026
4
CVEs
0
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 1High 1Medium 1Low 1
Watch

Add Mpdf to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2019-1000005
8.8
2%
Feb 4
mPDF version 7.1.7 and earlier contains a CWE-502: Deserialization of Untrusted Data vulnerability in getImage() method of Image/ImageProcessor class that can result in Arbitry…
Affected: through 7.1.7
Showing 1