Skip to content
OpenAdvisories

Vendor

dompdf

16 known vulnerabilities.

Products

dompdf 9 dompdf/dompdf 4 php-svg-lib 3
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.3
    CVE-2026-59941 Public exploit

    Dompdf: Uncontrolled resource consumption based on declared BMP dimensions

    Dompdf is an HTML to PDF converter for PHP. Versions 3.15 and prior accept a BMP image and generates a PDF-compatible PNG based only on its declared header dimensions and never bounds width × height before the image is converted through GD. A 58-byte BMP whos…

    dompdf dompdf dompdf/dompdf php-dompdf Debian Ubuntu Packagist
  • Critical 10.0
    CVE-2023-23924 Public exploit

    URI validation failure on SVG parsing in Dompdf

    Dompdf is an HTML to PDF converter. The URI validation on dompdf 2.0.1 can be bypassed on SVG parsing by passing `<image>` tags with uppercase letters. This may lead to arbitrary object unserialize on PHP < 8, through the `phar` URL wrapper. An attacker can e…

    dompdf dompdf dompdf/dompdf Packagist