Package · Debian

tcpdf

11 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

Critical 9.8

CVE-2024-56521

TCPDF missing certificate validation

An issue was discovered in TCPDF before 6.8.0. If libcurl is used, CURLOPT_SSL_VERIFYHOST and CURLOPT_SSL_VERIFYPEER are set unsafely.

Tecnick tcpdf tcpdf tcpdf Debian Ubuntu Packagist

Dec 27, 2024
Critical 9.8

CVE-2018-17057 Public exploit EPSS 26%

TCPDF vulnerable to attackers triggering deserialization of arbitrary data

An issue was discovered in TCPDF before 6.2.22. Attackers can trigger deserialization of arbitrary data via the phar:// wrapper.

tcpdf tcpdf tecnickcom/tcpdf la-haute-societe/tcpdf Debian Ubuntu Packagist

Sep 14, 2018