dompdf/dompdf vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Get a demo

Browse by ecosystem

npmPyPIMavenGoRubyGemsCargoNuGetComposerpubSwiftGitHub Actions
CVE-IDSeverityPackage summary
CVE-2026-59943Mediumdompdf/dompdf: Dompdf: Embedded SVG images can leak existence of files and directories within the filesystemCVE-2026-59942Mediumdompdf/dompdf: Dompdf: Denial of Service (DoS) via Resource Exhaustion using Oversized Image BitmapsCVE-2026-59941Mediumdompdf/dompdf: Dompdf: Uncontrolled resource consumption based on declared BMP dimensionsCVE-2026-56722Mediumdompdf/dompdf: Dompdf: Local file read due to improper file path validation in SVG images encoded as data-URICVE-2026-55555Lowdompdf/dompdf: Dompdf: File existence oracle via font-face stylesheet declarationCVE-2026-55554Lowdompdf/dompdf: Dompdf: Chroot Validation BypassCVE-2021-3902Criticaldompdf/dompdf: Improper Restriction of XML External Entity Reference in dompdf/dompdfCVE-2021-3838Criticaldompdf/dompdf: Deserialization of Untrusted Data in dompdf/dompdfCVE-2023-50262Mediumdompdf/dompdf: Denial of service caused by infinite recursion when parsing SVG imagesCVE-2023-24813Criticaldompdf/dompdf: URI validation failure on SVG parsing. Bypass of CVE-2023-23924CVE-2023-23924Criticaldompdf/dompdf: Dompdf vulnerable to URI validation failure on SVG parsingCVE-2022-41343Highdompdf/dompdf: Dompdf allows remote file inclusion because URI validation failure does not halt font registrationCVE-2022-2400Mediumdompdf/dompdf: Dompdf before v2.0.0 vulnerable to chroot check bypassCVE-2022-0085Mediumdompdf/dompdf: Server-Side Request Forgery in dompdf/dompdfCVE-2014-5013Highdompdf/dompdf: DOMPDF Remote Code ExecutionCVE-2014-5012Mediumdompdf/dompdf: DOMPDF denial of service vulnerabilityCVE-2014-5011Mediumdompdf/dompdf: DOMPDF Information DisclosureCVE-2010-4879Highdompdf/dompdf: DOMPDF Remote File Inclusion VulnerabilityCVE-2014-2383Mediumdompdf/dompdf: DOMPDF Arbitrary File ReadCVE-2022-28368Criticaldompdf/dompdf: Remote code injection in dompdf/dompdf

Stop the waste.
Protect your environment with Kodem.