Lucene search
+L

404 matches found

OSV
OSV
added 2026/07/22 10:52 p.m.8 views

GHSA-J8QW-6JW8-R297 Dompdf: Embedded SVG images can leak existence of files and directories within the filesystem

Summary If a malicious actor can supply unrestricted content for rendering by Dompdf they can utilize the SVG rendering functionality to leak filesystem information when rendering PDF files using image references within a data-URI encoded SVG document. Details Using an element inside a data-URI...

6.3CVSS5.5AI score0.00308EPSS
SaveExploits0References4
Snyk
Snyk
added 2026/07/22 10:51 p.m.8 views

Allocation of Resources Without Limits or Throttling

Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling through the render process. An attacker can exhaust system resources and cause the PHP process to crash by submitting a specially crafted HTML document containing a high-entropy,...

6.3CVSS5.8AI score0.00395EPSS
SaveExploits0References3
Github Security Blog
Github Security Blog
added 2026/07/22 10:51 p.m.9 views

Dompdf: Denial of Service (DoS) via Resource Exhaustion using Oversized Image Bitmaps

Summary Dompdf v3.1.5 is vulnerable to a Denial of Service DoS attack via resource exhaustion. An attacker can crash the PHP process by providing a specially crafted HTML document containing a single image with massive dimensions e.g., 30,000x30,000 pixels. While Dompdf implements internal checks...

6.3CVSS6.1AI score0.00395EPSS
SaveExploits0References5Affected Software1
OSV
OSV
added 2026/07/22 10:51 p.m.8 views

GHSA-F5GF-2CJ8-52G2 Dompdf: Denial of Service (DoS) via Resource Exhaustion using Oversized Image Bitmaps

Summary Dompdf v3.1.5 is vulnerable to a Denial of Service DoS attack via resource exhaustion. An attacker can crash the PHP process by providing a specially crafted HTML document containing a single image with massive dimensions e.g., 30,000x30,000 pixels. While Dompdf implements internal checks...

6.3CVSS6.2AI score0.00395EPSS
SaveExploits0References5
Github Security Blog
Github Security Blog
added 2026/07/22 10:50 p.m.10 views

Dompdf: Uncontrolled resource consumption based on declared BMP dimensions

Summary dompdf accepts a BMP image and generates a PDF-compatible PNG based only on its declared header dimensions and never bounds width × height before the image is converted through GD. A 58-byte BMP whose header declares e.g. 6000×6000 is accepted and later drives imagecreatetruecolor$width,...

6.3CVSS6AI score0.00507EPSS
SaveExploits0References4Affected Software1
Snyk
Snyk
added 2026/07/22 10:50 p.m.8 views

Denial of Service (DoS)

Overview Affected versions of this package are vulnerable to Denial of Service DoS via the imagecreatefrombmp process. An attacker can cause excessive memory and CPU consumption by submitting a specially crafted BMP image with large declared dimensions embedded as a data URI in HTML. This can lea...

6.3CVSS5.9AI score0.00507EPSS
SaveExploits0References2
OSV
OSV
added 2026/07/22 10:50 p.m.4 views

GHSA-8HG6-C449-896M Dompdf: Uncontrolled resource consumption based on declared BMP dimensions

Summary dompdf accepts a BMP image and generates a PDF-compatible PNG based only on its declared header dimensions and never bounds width × height before the image is converted through GD. A 58-byte BMP whose header declares e.g. 6000×6000 is accepted and later drives imagecreatetruecolor$width,...

6.3CVSS6AI score0.00507EPSS
SaveExploits0References4
Circl
Circl
added 2026/07/22 10:35 p.m.9 views

CVE-2026-55554

creationtimestamp| type| source ---|---|--- 2026-07-22 22:35:26+00:00| published-proof-of-concept| https://github.com/dompdf/dompdf/security/advisories/GHSA-wvh6-f5jh-8gw4...

2.3CVSS4.9AI score0.00278EPSS
SaveExploits0References1
Circl
Circl
added 2026/07/22 10:35 p.m.10 views

CVE-2026-56722

creationtimestamp| type| source ---|---|--- 2026-07-22 22:35:19+00:00| published-proof-of-concept| https://github.com/dompdf/dompdf/security/advisories/GHSA-cx96-42px-69fm...

6.3CVSS4.9AI score0.00558EPSS
SaveExploits0References1
Github Security Blog
Github Security Blog
added 2026/07/22 9:30 p.m.6 views

Dompdf: Local file read due to improper file path validation in SVG images encoded as data-URI

Description: An attacker, who controls the HTML input supplied to dompdf, can read arbitrary images from the server’s file system, bypassing the chroot restriction. The vulnerability is exploitable in the default configuration. Exploitation conditions: An external user Researcher: Nikita Sveshnik...

6.3CVSS5.6AI score0.00558EPSS
SaveExploits0References5Affected Software1
OSV
OSV
added 2026/07/22 9:30 p.m.10 views

GHSA-CX96-42PX-69FM Dompdf: Local file read due to improper file path validation in SVG images encoded as data-URI

Description: An attacker, who controls the HTML input supplied to dompdf, can read arbitrary images from the server’s file system, bypassing the chroot restriction. The vulnerability is exploitable in the default configuration. Exploitation conditions: An external user Researcher: Nikita Sveshnik...

6.3CVSS5.6AI score0.00558EPSS
SaveExploits0References5
OSV
OSV
added 2026/07/22 9:7 p.m.6 views

GHSA-7X2P-4JVH-6384 Dompdf: File existence oracle via font-face stylesheet declaration

Description Dompdf is vulnerable to a File Existence Oracle attack through the manipulation of the CSS @font-face directive. By providing malicious HTML that references local files via the file:// protocol repeatedly, an attacker can trigger PHP memory exhaustion. The critical point of this flaw ...

2.3CVSS6AI score0.00504EPSS
SaveExploits0References4
Github Security Blog
Github Security Blog
added 2026/07/22 9:7 p.m.8 views

Dompdf: File existence oracle via font-face stylesheet declaration

Description Dompdf is vulnerable to a File Existence Oracle attack through the manipulation of the CSS @font-face directive. By providing malicious HTML that references local files via the file:// protocol repeatedly, an attacker can trigger PHP memory exhaustion. The critical point of this flaw ...

2.3CVSS5.9AI score0.00504EPSS
SaveExploits0References4Affected Software1
Snyk
Snyk
added 2026/07/22 9:7 p.m.8 views

Information Exposure

Overview Affected versions of this package are vulnerable to Information Exposure in the processing of CSS @font-face directives referencing local files via the file:// protocol. An attacker can determine the existence of sensitive files on the server by submitting crafted HTML and analyzing the...

3.1CVSS5.9AI score0.00504EPSS
SaveExploits0References2
OSV
OSV
added 2026/07/22 9:6 p.m.6 views

GHSA-WVH6-F5JH-8GW4 Dompdf: Chroot Validation Bypass

Summary The chroot check for local files uses a prefix string check to enforce chroot boundaries. The simple string comparison it performs allows paths like /var/www/rootsecret/file.html when chroot is /var/www/root. This allows attacker-controlled document paths/resources to bypass intended loca...

2.3CVSS5.6AI score0.00278EPSS
SaveExploits0References4
Github Security Blog
Github Security Blog
added 2026/07/22 9:6 p.m.8 views

Dompdf: Chroot Validation Bypass

Summary The chroot check for local files uses a prefix string check to enforce chroot boundaries. The simple string comparison it performs allows paths like /var/www/rootsecret/file.html when chroot is /var/www/root. This allows attacker-controlled document paths/resources to bypass intended loca...

2.3CVSS5.6AI score0.00278EPSS
SaveExploits0References4Affected Software1
Positive Technologies
Positive Technologies
added 2026/07/22 12:0 a.m.10 views

PT-2026-63555

Name of the Vulnerable Software and Affected Versions Dompdf versions 3.x and earlier Description An issue exists where a malicious actor providing unrestricted content for rendering can leak filesystem information. By using an element within a data-URI encoded SVG document, an attacker can attem...

6.3CVSS5.9AI score0.00308EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2026/07/22 12:0 a.m.11 views

PT-2026-63554

Name of the Vulnerable Software and Affected Versions Dompdf versions prior to 3.16 Description Dompdf is susceptible to a Denial of Service DoS attack via resource exhaustion. An unauthenticated remote attacker can crash the PHP process by submitting a specially crafted HTML document containing ...

6.3CVSS5.9AI score0.00395EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
added 2026/07/22 12:0 a.m.12 views

PT-2026-63542

Name of the Vulnerable Software and Affected Versions Dompdf versions prior to 3.16 Description An issue exists in the validateLocalUri method where chroot boundaries are enforced using a strpos prefix check after paths are normalized with realpath. Because normalization removes the trailing...

2.3CVSS5.9AI score0.00278EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2026/07/22 12:0 a.m.10 views

PT-2026-63553

Name of the Vulnerable Software and Affected Versions Dompdf versions prior to 3.16 Description Dompdf fails to validate the dimensions of BMP images before processing them. The software relies solely on the declared header dimensions to allocate memory for the image canvas via the...

6.3CVSS5.8AI score0.00507EPSS
SaveExploits0References6
Rows per page
Query Builder