dompdf vulnerabilities and fixes

Recent CVEs affecting dompdf, with upgrade or downgrade steps. 6 tracked.

dompdf has 6 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 6. Most recent: 2026-07-28. Highest priority: CVE-2026-59942 (score 51/100).

• CVE-2026-55554 HIGH 7.5 UPGRADE Dompdf is an HTML to PDF converter for PHP
• CVE-2026-55555 HIGH 7.5 UPGRADE Dompdf is an HTML to PDF converter for PHP
• CVE-2026-56722 MEDIUM 5.3 UPGRADE Dompdf is an HTML to PDF converter for PHP
• CVE-2026-59941 HIGH 7.5 UPGRADE Dompdf is an HTML to PDF converter for PHP
• CVE-2026-59942 HIGH 7.5 UPGRADE Dompdf is an HTML to PDF converter for PHP
• CVE-2026-59943 MEDIUM 5.3 UPGRADE Dompdf is an HTML to PDF converter for PHP

FAQ

How do I fix dompdf vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is dompdf being exploited right now?

None of the tracked dompdf CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which dompdf CVE should I patch first?

CVE-2026-59942 currently ranks highest (51/100): Dompdf is an HTML to PDF converter for PHP.

RSS feed for dompdf · ← Back to latest CVEs