CVE-2026-113643

A vulnerability exists in EspoCRM versions up to 9.3.10/10.0.10 within the PDF Rendering Pipeline component. Specifically, the ImageSourceProvider::get function in the file application/Espo/Tools/Pdf/Dompdf/ImageSourceProvider.php fails to properly validate the ID argument. This flaw allows for a...