Skip to content
OpenAdvisories

Vendor

dompdf

16 known vulnerabilities.

Products

dompdf 9 dompdf/dompdf 4 php-svg-lib 3
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.3
    CVE-2023-50252 EPSS 24%

    php-svg-lib unsafe attributes merge when parsing `use` tag

    php-svg-lib is an SVG file parsing / rendering library. Prior to version 0.5.1, when handling `<use>` tag that references an `<image>` tag, it merges the attributes from the `<use>` tag to the `<image>` tag. The problem pops up especially when the `href` attr…

    dompdf php-svg-lib php-dompdf-svg-lib Debian