DO
Vendor
dompdf
15
CVEs
0
On KEV
0
New 30D
Products
DO9.8
dompdf
dompdf
10 CVEs0 on KEV0 new
PH9.8
php-svg-lib
dompdf
3 CVEs0 on KEV0 new
DO9.8
dompdf/dompdf
dompdf
2 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-59941 | DO dompdf dompdf | 7.5 | Jul 28 | Dompdf: Uncontrolled resource consumption based on declared BMP dimensions |
| CVE-2026-59942 | DO dompdf dompdf | 7.5 | Jul 28 | Dompdf: Denial of Service (DoS) via Resource Exhaustion using Oversized Image Bitmaps |
| CVE-2026-59943 | DO dompdf dompdf | 5.3 | Jul 28 | Dompdf: Embedded SVG images can leak existence of files and directories within the filesystem |
| CVE-2026-56722 | DO dompdf dompdf | 5.3 | Jul 28 | Dompdf: Local file read due to improper file path validation in SVG images encoded as data-URI |
| CVE-2026-55554 | DO dompdf dompdf | 7.5 | Jul 28 | Dompdf: Chroot Validation Bypass |
| CVE-2026-55555 | DO dompdf dompdf | 7.5 | Jul 28 | Dompdf: File existence oracle via font-face stylesheet declaration |
| CVE-2021-3902 | DO dompdf/dompdf dompdf | 9.8 | Nov 15 | Improper Restriction of XML External Entity Reference in dompdf/dompdf |
| CVE-2021-3838 | DO dompdf/dompdf dompdf | 9.8 | Nov 15 | PHAR Deserialization in dompdf/dompdf |
| CVE-2024-25117 | PH php-svg-lib dompdf | 9.8 | Feb 21 | php-svg-lib lacks path validation on font through SVG inline styles |
| CVE-2023-50262 | DO dompdf dompdf | 7.5 | Dec 13 | Dompdf possible DoS caused by infinite recursion when parsing SVG images |
| CVE-2023-50252 | PH php-svg-lib dompdf | 9.8 | Dec 12 | php-svg-lib unsafe attributes merge when parsing `use` tag |
| CVE-2023-50251 | PH php-svg-lib dompdf | 7.5 | Dec 12 | php-svg-lib possible DoS caused by infinite recursion when parsing SVG document |
| CVE-2014-2383 | DO Dompdf Dompdf | – | Apr 28 | dompdf.php in dompdf before 0.6.1, when DOMPDF_ENABLE_PHP is enabled, allows context-dependent attackers to bypass chroot protections and read arbitrary files via a PHP protocol… |