DP
Vendor
Dompdf Project
18
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-59941 | DO Dompdf Dompdf Project | 7.5 | Jul 28 | Dompdf: Uncontrolled resource consumption based on declared BMP dimensions |
| CVE-2026-59942 | DO Dompdf Dompdf Project | 7.5 | Jul 28 | Dompdf: Denial of Service (DoS) via Resource Exhaustion using Oversized Image Bitmaps |
| CVE-2026-59943 | DO Dompdf Dompdf Project | 5.3 | Jul 28 | Dompdf: Embedded SVG images can leak existence of files and directories within the filesystem |
| CVE-2026-56722 | DO Dompdf Dompdf Project | 5.3 | Jul 28 | Dompdf: Local file read due to improper file path validation in SVG images encoded as data-URI |
| CVE-2026-55554 | DO Dompdf Dompdf Project | 7.5 | Jul 28 | Dompdf: Chroot Validation Bypass |
| CVE-2026-55555 | DO Dompdf Dompdf Project | 7.5 | Jul 28 | Dompdf: File existence oracle via font-face stylesheet declaration |
| CVE-2021-3902 | DO Dompdf Dompdf Project | 9.8 | Nov 15 | Improper Restriction of XML External Entity Reference in dompdf/dompdf |
| CVE-2021-3838 | DO Dompdf Dompdf Project | 9.8 | Nov 15 | PHAR Deserialization in dompdf/dompdf |
| CVE-2023-50262 | DO Dompdf Dompdf Project | 7.5 | Dec 13 | Dompdf possible DoS caused by infinite recursion when parsing SVG images |
| CVE-2023-24813 | DO Dompdf Dompdf Project | 9.8 | Feb 7 | Dompdf is an HTML to PDF converter written in php |
| CVE-2023-23924 | DO Dompdf Dompdf Project | 9.8 | Feb 1 | Dompdf is an HTML to PDF converter |
| CVE-2022-41343 | DO Dompdf Dompdf Project | 7.5 | Sep 25 | registerFont in FontMetrics.php in Dompdf before 2.0.1 allows remote file inclusion because a URI validation failure does not halt font registration, as demonstrated by a… |
| CVE-2022-2400 | DO Dompdf Dompdf Project | 5.3 | Jul 18 | External Control of File Name or Path in GitHub repository dompdf/dompdf prior to 2.0.0 |
| CVE-2022-0085 | DO Dompdf Dompdf Project | 5.3 | Jun 28 | Server-Side Request Forgery (SSRF) in GitHub repository dompdf/dompdf prior to 2.0.0 |
| CVE-2022-28368 | DO Dompdf Dompdf Project | 9.8 | Apr 3 | Dompdf 1.2.1 allows remote code execution via a .php file in the src:url field of an @font-face Cascading Style Sheets (CSS) statement (within an HTML input file) |
| CVE-2014-5013 | DO Dompdf Dompdf Project | 8.8 | Jan 10 | DOMPDF before 0.6.2 allows remote code execution, a related issue to CVE-2014-2383 |
| CVE-2014-5012 | DO Dompdf Dompdf Project | 6.5 | Jan 10 | DOMPDF before 0.6.2 allows denial of service |
| CVE-2014-5011 | DO Dompdf Dompdf Project | 6.5 | Jan 10 | DOMPDF before 0.6.2 allows Information Disclosure |