Fpdf2 Implicitly Loads External URLs And Local Image Paths When Rendering Attacker-controlled Content

Summary "fpdf2" implicitly dereferences image resource references supplied to rendering APIs. If an application passes untrusted HTML, SVG, template data, or image paths into those APIs, "fpdf2" may issue outbound HTTPS requests or attempt to open local filesystem paths. This behavior is relevant...