CVE-2014-5011

CVE-2014-5011 affects Dompdf prior to 0.6.2. The vulnerability arises from improper handling/validation of untrusted input when processing HTML content, enabling information disclosure. Impact is limited to affected Dompdf versions; remediation is upgrading to Dompdf 0.6.2 or later as indicated b...

CVE-2014-5012

CVE-2014-5012 affects Dompdf up to version 0.6.2; faulty input handling allows denial of service during HTML-to-PDF processing. The provided documents confirm the vulnerability and a fix in v0.6.2 (GitHub release tag). No exploitation context or in-the-wild details are provided in the connected d...

CVE-2026-56722

Dompdf (PHP HTML-to-PDF library) prior to v3.16 is vulnerable to local-file read via SVG in a data: URI. The attack wraps a local file path in an SVG image; dompdf processes the SVG twice, and the second pass hands the image to php-svg-lib with external references enabled. php-svg-lib then reads ...

CVE-2026-59943

Dompdf vulnerability (CVE-2026-59943) affects version 3.15 and earlier. In a data-URI encoded SVG, using an element with href/xlink:href pointing to local files (e.g., file:///...), the rendering process can leak filesystem information by differentiating behavior when a referenced file/directory...