Package · Packagist

tecnickcom/tcpdf

8 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

High 7.5

CVE-2024-22640 Public exploit

TCPDF vulnerable to Regular Expression Denial of Service

TCPDF version <=6.6.5 is vulnerable to ReDoS (Regular Expression Denial of Service) if parsing an untrusted HTML page with a crafted color.

tcpdf tcpdf tecnickcom/tcpdf Debian Ubuntu Packagist

Apr 19, 2024
Critical 9.8

CVE-2018-17057 Public exploit EPSS 26%

TCPDF vulnerable to attackers triggering deserialization of arbitrary data

An issue was discovered in TCPDF before 6.2.22. Attackers can trigger deserialization of arbitrary data via the phar:// wrapper.

tcpdf tcpdf tecnickcom/tcpdf la-haute-societe/tcpdf Debian Ubuntu Packagist

Sep 14, 2018