FP
Product
fpdf2
2
CVEs
0
On KEV
6.5
Max CVSS
2
New 30D
Severity mix
Critical 0High 0Medium 2Low 0
Watch
Add fpdf2 to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-114610 New | 6.5 | Oct 22 | fpdf2: Exponential SVG '<use>' expansion causes CPU and memory exhaustion in 'FPDF.image()' Affected: >= 2.5.0, < 2.8.8 |
| CVE-2026-114609 New | 5.8 | Oct 22 | fpdf2 implicitly loads external URLs and local image paths when rendering attacker-controlled content Affected: < 2.8.8 |
Showing 2