CVE-2024-56521

An issue exists in TCPDF versions prior to 6.8.0 where the software unsafely sets CURLOPT_SSL_VERIFYHOST and CURLOPT_SSL_VERIFYPEER when libcurl is used. This improper certificate validation (CWE-295) can lead to critical security risks. While the vulnerability is present in several Linux distrib...

MGASA-2024-0169 Updated php-tcpdf packages fix security vulnerability

TCPDF version =6.6.5 is vulnerable to ReDoS Regular Expression Denial of Service if parsing an untrusted HTML page with a crafted color. CVE-2024-22640...