Lucene search
+L

404 matches found

OSV
OSV
added 6 days ago4 views

DEBIAN-CVE-2026-55554

Dompdf is an HTML to PDF converter for PHP. In versions 3.15 and prior, the validateLocalUri method enforces chroot boundaries with a strpos prefix check after normalizing paths with realpath . Because normalization strips the trailing directory separator from $chrootPath , the check only...

2.3CVSS5.8AI score0.00278EPSS
SaveExploits0References1
NVD
NVD
added 6 days ago7 views

CVE-2026-55555

Dompdf is an HTML to PDF converter for PHP. Versions 3.15 and prior are vulnerable to a File Existence Oracle attack through the manipulation of the CSS @font-face directive. By providing malicious HTML that references local files via the file:// protocol repeatedly, an attacker can trigger PHP...

2.3CVSS0.00504EPSS
SaveExploits0References3
NVD
NVD
added 6 days ago5 views

CVE-2026-55554

Dompdf is an HTML to PDF converter for PHP. In versions 3.15 and prior, the validateLocalUri method enforces chroot boundaries with a strpos prefix check after normalizing paths with realpath . Because normalization strips the trailing directory separator from $chrootPath , the check only...

2.3CVSS0.00278EPSS
SaveExploits0References2
OSV
OSV
added 6 days ago2 views

DEBIAN-CVE-2026-55555

Dompdf is an HTML to PDF converter for PHP. Versions 3.15 and prior are vulnerable to a File Existence Oracle attack through the manipulation of the CSS @font-face directive. By providing malicious HTML that references local files via the file:// protocol repeatedly, an attacker can trigger PHP...

2.3CVSS5.8AI score0.00504EPSS
SaveExploits0References1
Cvelist
Cvelist
added 6 days ago31 views

CVE-2026-55554 Dompdf: Chroot Validation Bypass

Dompdf is an HTML to PDF converter for PHP. In versions 3.15 and prior, the validateLocalUri method enforces chroot boundaries with a strpos prefix check after normalizing paths with realpath . Because normalization strips the trailing directory separator from $chrootPath , the check only...

2.3CVSS0.00278EPSS
SaveExploits0References2
OSV
OSV
added 6 days ago4 views

CVE-2026-55554 Dompdf: Chroot Validation Bypass

Dompdf is an HTML to PDF converter for PHP. In versions 3.15 and prior, the validateLocalUri method enforces chroot boundaries with a strpos prefix check after normalizing paths with realpath . Because normalization strips the trailing directory separator from $chrootPath , the check only...

2.3CVSS5.8AI score0.00278EPSS
SaveExploits0References4
CVE
CVE
added 6 days ago18 views

CVE-2026-55554

Summary of CVE-2026-55554 (Dompdf) : Dompdf (PHP HTML-to-PDF converter) versions up to 3.15 are affected by a chroot validation bypass in validateLocalUri(), which uses a realpath-normalized prefix check with strpos. Because the trailing slash is removed during normalization, the chroot path is o...

2.3CVSS5.8AI score0.00278EPSS
SaveExploits0References2
Debian CVE
Debian CVE
added 6 days ago6 views

CVE-2026-55554

Dompdf is an HTML to PDF converter for PHP. In versions 3.15 and prior, the validateLocalUri method enforces chroot boundaries with a strpos prefix check after normalizing paths with realpath . Because normalization strips the trailing directory separator from $chrootPath , the check only...

2.3CVSS5.8AI score0.00278EPSS
SaveExploits0
Cvelist
Cvelist
added 6 days ago35 views

CVE-2026-55555 Dompdf: File existence oracle via font-face stylesheet declaration

Dompdf is an HTML to PDF converter for PHP. Versions 3.15 and prior are vulnerable to a File Existence Oracle attack through the manipulation of the CSS @font-face directive. By providing malicious HTML that references local files via the file:// protocol repeatedly, an attacker can trigger PHP...

2.3CVSS0.00504EPSS
SaveExploits0References3
OSV
OSV
added 6 days ago4 views

CVE-2026-55555 Dompdf: File existence oracle via font-face stylesheet declaration

Dompdf is an HTML to PDF converter for PHP. Versions 3.15 and prior are vulnerable to a File Existence Oracle attack through the manipulation of the CSS @font-face directive. By providing malicious HTML that references local files via the file:// protocol repeatedly, an attacker can trigger PHP...

2.3CVSS5.8AI score0.00504EPSS
SaveExploits0References5
CVE
CVE
added 6 days ago25 views

CVE-2026-55555

Dompdf (versions ≤3.15) is vulnerable to a File Existence Oracle via the CSS @font-face directive, allowing an attacker to probe local files using file:// references and trigger memory exhaustion. The vulnerability hinges on observable differences: when a referenced local file exists, Dompdf proc...

2.3CVSS5.8AI score0.00504EPSS
SaveExploits0References3
Veracode
Veracode
added 2026/07/26 1:42 a.m.6 views

Path Traversal

dompdf/dompdf is vulnerable to Path Traversal. The vulnerability is due to an improper prefix validation in the validateLocalUri method, where normalized paths are checked using strpos without enforcing directory boundaries, which allows an attacker who can control rendered HTML to escape the...

2.3CVSS5.8AI score0.00278EPSS
SaveExploits0References3Affected Software1
Veracode
Veracode
added 2026/07/26 12:6 a.m.7 views

Path Traversal

dompdf/dompdf is vulnerable to Path Traversal. The vulnerability is due to improper validation of file paths when processing SVG images embedded through data: URIs, where the second SVG processing pass performed by php-svg-lib does not enforce the same security restrictions, allowing an...

6.3CVSS6.1AI score0.00558EPSS
SaveExploits0References4Affected Software1
Veracode
Veracode
added 2026/07/25 10:57 p.m.6 views

File Existence Oracle

dompdf/dompdf is vulnerable to File Existence Oracle. The vulnerability is due to inconsistent handling of the CSS @font-face directive when processing local file:// resources, which allows an attacker to repeatedly reference local files and observe differences in memory exhaustion behavior to...

2.3CVSS5.9AI score0.00504EPSS
SaveExploits0References4Affected Software1
Veracode
Veracode
added 2026/07/24 12:42 p.m.7 views

Uncontrolled Resource Consumption

dompdf/dompdf is vulnerable to Uncontrolled Resource Consumption. The vulnerability is due to the library trusting attacker-controlled BMP header dimensions without validating the image size before conversion, which allows an attacker to embed a crafted BMP image e.g., via a data:image/bmp;base64...

6.3CVSS5.9AI score0.00507EPSS
SaveExploits0References4Affected Software1
Circl
Circl
added 2026/07/23 12:35 a.m.10 views

CVE-2026-59941

creationtimestamp| type| source ---|---|--- 2026-07-23 00:35:10+00:00| published-proof-of-concept| https://github.com/dompdf/dompdf/security/advisories/GHSA-8hg6-c449-896m 2026-08-02 18:00:05+00:00| published-proof-of-concept| Telegram/SHCtA7dY1mItB2gbm66yqWXF69tJGblulI8ccELNE-1shwc 2026-08-03...

6.3CVSS5.3AI score0.00507EPSS
SaveExploits0References1
Circl
Circl
added 2026/07/23 12:35 a.m.11 views

CVE-2026-59942

creationtimestamp| type| source ---|---|--- 2026-07-23 00:35:07+00:00| published-proof-of-concept| https://github.com/dompdf/dompdf/security/advisories/GHSA-f5gf-2cj8-52g2...

6.3CVSS4.8AI score0.00395EPSS
SaveExploits0References1
Circl
Circl
added 2026/07/23 12:35 a.m.9 views

CVE-2026-59943

creationtimestamp| type| source ---|---|--- 2026-07-23 00:35:05+00:00| published-proof-of-concept| https://github.com/dompdf/dompdf/security/advisories/GHSA-j8qw-6jw8-r297...

6.3CVSS4.8AI score0.00308EPSS
SaveExploits0References1
Snyk
Snyk
added 2026/07/22 10:52 p.m.8 views

Information Exposure

Overview Affected versions of this package are vulnerable to Information Exposure via the processing of embedded SVG images containing elements with xlink:href attributes referencing local files or directories. An attacker can determine the existence of files or directories on the server by...

6.3CVSS5.9AI score0.00308EPSS
SaveExploits0References2
Github Security Blog
Github Security Blog
added 2026/07/22 10:52 p.m.13 views

Dompdf: Embedded SVG images can leak existence of files and directories within the filesystem

Summary If a malicious actor can supply unrestricted content for rendering by Dompdf they can utilize the SVG rendering functionality to leak filesystem information when rendering PDF files using image references within a data-URI encoded SVG document. Details Using an element inside a data-URI...

6.3CVSS5.5AI score0.00308EPSS
SaveExploits0References4Affected Software1
Rows per page
Query Builder