Skip to content
OpenAdvisories

Package · Debian

php-dompdf

16 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Low 2.3
    CVE-2026-55554

    Dompdf: Chroot Validation Bypass

    Dompdf is an HTML to PDF converter for PHP. In versions 3.15 and prior, the validateLocalUri() method enforces chroot boundaries with a strpos() prefix check after normalizing paths with  realpath() . Because normalization strips the trailing directory separa…

    dompdf dompdf dompdf/dompdf php-dompdf Debian Ubuntu Packagist
  • Low 2.3
    CVE-2026-55555

    Dompdf: File existence oracle via font-face stylesheet declaration

    Dompdf is an HTML to PDF converter for PHP. Versions 3.15 and prior are vulnerable to a File Existence Oracle attack through the manipulation of the CSS @font-face directive. By providing malicious HTML that references local files via the file:// protocol rep…

    dompdf dompdf dompdf/dompdf php-dompdf Debian Ubuntu Packagist