Ddompdf

Products

Exploited and recent CVEs

• CVE-2026-59941 Medium 6.3 Dompdf: Uncontrolled resource consumption based on declared BMP dimensions 0.6%
• CVE-2026-59942 Medium 6.3 Dompdf: Denial of Service (DoS) via Resource Exhaustion using Oversized Image Bitmaps 0.9%
• CVE-2026-59943 Medium 6.3 Dompdf: Embedded SVG images can leak existence of files and directories within the filesystem 0.4%
• CVE-2026-56722 Medium 6.3 Dompdf: Local file read due to improper file path validation in SVG images encoded as data-URI 0.4%
• CVE-2026-55554 Low 2.3 Dompdf: Chroot Validation Bypass 0.5%
• CVE-2026-55555 Low 2.3 Dompdf: File existence oracle via font-face stylesheet declaration 0.5%
• CVE-2021-3902 Critical 9.8 Improper Restriction of XML External Entity Reference in dompdf/dompdf 1.0%
• CVE-2021-3838 Critical 9.8 PHAR Deserialization in dompdf/dompdf 1.4%
• CVE-2024-25117 Medium 6.8 php-svg-lib lacks path validation on font through SVG inline styles 0.9%
• CVE-2023-50262 Medium 5.3 Dompdf possible DoS caused by infinite recursion when parsing SVG images 1.5%
• CVE-2023-50252 High 8.3 php-svg-lib unsafe attributes merge when parsing `use` tag 23.9%
• CVE-2023-50251 Medium 5.3 php-svg-lib possible DoS caused by infinite recursion when parsing SVG document 0.9%
• CVE-2023-24813 Critical 10.0 URI validation failure on SVG parsing. Bypass of CVE-2023-23924 2.5%
• CVE-2023-23924 Critical 10.0 URI validation failure on SVG parsing in Dompdf 3.6%
• CVE-2022-2400 Medium 5.3 External Control of File Name or Path in dompdf/dompdf 1.2%
• CVE-2022-0085 Low 3.7 Server-Side Request Forgery (SSRF) in dompdf/dompdf 1.0%