Skip to content
OpenAdvisories

Package · Packagist

mpdf/mpdf

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • High 8.8
    CVE-2019-1000005

    mPDF Unsafe Deserialization

    mPDF version 7.1.7 and earlier contains a CWE-502: Deserialization of Untrusted Data vulnerability in getImage() method of Image/ImageProcessor class that can result in Arbitry code execution, file write, etc.. This attack appears to be exploitable via attack…

    mpdf/mpdf Packagist