Tecnick tcpdf

• CVE-2024-56527 High 7.5 An issue was discovered in TCPDF before 6.8.0. The Error function lacks an htmlspecialchars call for the error message. 0.8%
• CVE-2024-56520 High 7.3 An issue was discovered in tc-lib-pdf-font before 2.6.4, as used in TCPDF before 6.8.0 and other products. Fonts are mishandled, e.g., FontBBox for Type 1 and TrueType fonts is misparsed. 0.6%
• CVE-2024-56522 High 7.5 An issue was discovered in TCPDF before 6.8.0. unserializeTCPDFtag uses != (aka loose comparison) and does not use a constant-time function to compare TCPDF tag hashes. 0.6%
• CVE-2024-56521 Critical 9.8 An issue was discovered in TCPDF before 6.8.0. If libcurl is used, CURLOPT_SSL_VERIFYHOST and CURLOPT_SSL_VERIFYPEER are set unsafely. 0.8%
• CVE-2024-56519 High 7.5 An issue was discovered in TCPDF before 6.8.0. setSVGStyles does not sanitize the SVG font-family attribute. 0.6%