PT-2026-30458

Name of the Vulnerable Software and Affected Versions Dompdf affected versions not specified Description Dompdf is subject to a File Existence Oracle attack via the manipulation of the CSS @font-face directive. By submitting malicious HTML that repeatedly references local files using the file://...