Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 22
Reset filtersDompdf: Denial of Service (DoS) via Resource Exhaustion using Oversized Image Bitmaps
Dompdf: Uncontrolled resource consumption based on declared BMP dimensions
Dompdf: Local file read due to improper file path validation in SVG images encoded as data-URI
Dompdf: File existence oracle via font-face stylesheet declaration
Dompdf: Chroot Validation Bypass
Deserialization of Untrusted Data in dompdf/dompdf
Improper Restriction of XML External Entity Reference in dompdf/dompdf
Denial of service caused by infinite recursion when parsing SVG images
URI validation failure on SVG parsing. Bypass of CVE-2023-23924
Dompdf vulnerable to URI validation failure on SVG parsing
Dompdf allows remote file inclusion because URI validation failure does not halt font registration
drupal/pdf_api - SA-CONTRIB-2022-050
Dompdf before v2.0.0 vulnerable to chroot check bypass
drupal/entity_print - SA-CONTRIB-2022-048
Server-Side Request Forgery in dompdf/dompdf
DOMPDF denial of service vulnerability
DOMPDF Remote Code Execution
DOMPDF Information Disclosure
DOMPDF Remote File Inclusion Vulnerability
DOMPDF Arbitrary File Read
Remote code injection in dompdf/dompdf
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.