Package · Packagist

tecnickcom/tcpdf

8 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

High 7.5

CVE-2024-22640 Public exploit

TCPDF vulnerable to Regular Expression Denial of Service

TCPDF version <=6.6.5 is vulnerable to ReDoS (Regular Expression Denial of Service) if parsing an untrusted HTML page with a crafted color.

tcpdf tcpdf tecnickcom/tcpdf Debian Ubuntu Packagist

Apr 19, 2024