CVE-2026-55555

Summary (concrete details from provided docs): Dompdf (PHP HTML-to-PDF converter) versions 3.15 and earlier are vulnerable to a File Existence Oracle via the CSS @font-face directive. An attacker can supply HTML that references local files with the file:// protocol to cause memory exhaustion, exp...