Skip to content
OpenAdvisories

Package · Packagist

phenx/php-svg-lib

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 10.0
    GHSA-97m3-52wr-xvv2

    Dompdf's usage of vulnerable version of phenx/php-svg-lib leads to restriction bypass and potential RCE

    ### Summary A lack of sanitization/check in the font path returned by php-svg-lib, in the case of a inline CSS font defined, that will be used by Cpdf to open a font will be passed to a `file_exists` call, which is sufficient to trigger metadata unserializing…

    phenx/php-svg-lib Packagist