Skip to content
OpenAdvisories

Package · Packagist

dompdf/dompdf

20 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 7.5
    CVE-2022-41343 Public exploit

    Dompdf allows remote file inclusion because URI validation failure does not halt font registration

    registerFont in FontMetrics.php in Dompdf before 2.0.1 allows remote file inclusion because a URI validation failure does not halt font registration, as demonstrated by a @font-face rule.

    dompdf/dompdf Packagist
  • High 8.8
    CVE-2014-5013

    DOMPDF Remote Code Execution

    DOMPDF before 0.6.2 allows remote code execution, a related issue to CVE-2014-2383.

    dompdf/dompdf php-dompdf php-dompdf Debian Ubuntu Packagist
  • High —
    CVE-2010-4879 Public exploit

    DOMPDF Remote File Inclusion Vulnerability

    PHP remote file inclusion vulnerability in dompdf.php in dompdf 0.6.0 beta1 allows remote attackers to execute arbitrary PHP code via a URL in the input_file parameter.

    dompdf/dompdf php-dompdf Debian Packagist