Package · Packagist

spoonity/tcpdf

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

Critical 9.8

CVE-2018-17057 Public exploit EPSS 26%

TCPDF vulnerable to attackers triggering deserialization of arbitrary data

An issue was discovered in TCPDF before 6.2.22. Attackers can trigger deserialization of arbitrary data via the phar:// wrapper.

tcpdf tcpdf tecnickcom/tcpdf fooman/tcpdf Debian Ubuntu Packagist

Sep 14, 2018