https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2026-59943.htmlhttps://patchthecve.com/cve/CVE-2026-59943.htmlTue, 04 Aug 2026 15:21:31 +0000MEDIUM 5.3: Dompdf is an HTML to PDF converter for PHP. In versions 3.15 and prior, if a malicious actor can supply unrestricted content for rendering by Dompdf they can utilize the SVG rendering functionality to leak filesystem information when rendering PDF files using image references within a data-URI encodhttps://patchthecve.com/cve/CVE-2026-59942.htmlhttps://patchthecve.com/cve/CVE-2026-59942.htmlTue, 04 Aug 2026 15:54:55 +0000HIGH 7.5: Dompdf is an HTML to PDF converter for PHP. Versions 3.15 and prior are vulnerable to a Denial of Service (DoS) attack via resource exhaustion. An attacker can crash the PHP process by providing a specially crafted HTML document containing a single image with massive dimensions (e.g., 30,000x30,000 https://patchthecve.com/cve/CVE-2026-59941.htmlhttps://patchthecve.com/cve/CVE-2026-59941.htmlTue, 04 Aug 2026 16:34:42 +0000HIGH 7.5: Dompdf is an HTML to PDF converter for PHP. Versions 3.15 and prior accept a BMP image and generates a PDF-compatible PNG based only on its declared header dimensions and never bounds width × height before the image is converted through GD. A 58-byte BMP whose header declares e.g. 6000×6000 is accephttps://patchthecve.com/cve/CVE-2026-56722.htmlhttps://patchthecve.com/cve/CVE-2026-56722.htmlTue, 04 Aug 2026 16:39:54 +0000MEDIUM 5.3: Dompdf is an HTML to PDF converter for PHP. In versions 3.15 and prior, aAn attacker who controls the HTML input can bypass this restriction by embedding a target file path inside an SVG image delivered through a  data:  URI, because dompdf processes the SVG twice and the second pass does not enforchttps://patchthecve.com/cve/CVE-2026-55555.htmlhttps://patchthecve.com/cve/CVE-2026-55555.htmlWed, 05 Aug 2026 16:29:57 +0000HIGH 7.5: Dompdf is an HTML to PDF converter for PHP. Versions 3.15 and prior are vulnerable to a File Existence Oracle attack through the manipulation of the CSS @font-face directive. By providing malicious HTML that references local files via the file:// protocol repeatedly, an attacker can trigger PHP memohttps://patchthecve.com/cve/CVE-2026-55554.htmlhttps://patchthecve.com/cve/CVE-2026-55554.htmlWed, 05 Aug 2026 16:37:42 +0000HIGH 7.5: Dompdf is an HTML to PDF converter for PHP. In versions 3.15 and prior, the validateLocalUri() method enforces chroot boundaries with a strpos() prefix check after normalizing paths with  realpath() . Because normalization strips the trailing directory separator from  $chrootPath , the check only ve