Skip to content
OpenAdvisories

Package · Ubuntu

php-dompdf

11 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.3
    CVE-2026-59941 Public exploit

    Dompdf: Uncontrolled resource consumption based on declared BMP dimensions

    Dompdf is an HTML to PDF converter for PHP. Versions 3.15 and prior accept a BMP image and generates a PDF-compatible PNG based only on its declared header dimensions and never bounds width × height before the image is converted through GD. A 58-byte BMP whos…

    dompdf dompdf dompdf/dompdf php-dompdf Debian Ubuntu Packagist