dompdf vulnerabilities

Recent CVEs affecting dompdf products. 3 tracked.

dompdf has 3 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 3. Most recent: 2024-02-21. Highest priority: CVE-2023-50252 (score 64/100).

• CVE-2024-25117 MEDIUM 6.8 UPGRADE php-svg-lib is a scalable vector graphics (SVG) file parsing/rendering library
• CVE-2023-50252 HIGH 8.3 UPGRADE php-svg-lib is an SVG file parsing / rendering library
• CVE-2023-50251 MEDIUM 5.3 UPGRADE php-svg-lib is an SVG file parsing / rendering library

FAQ

How do I fix dompdf vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is dompdf being exploited right now?

None of the tracked dompdf CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which dompdf CVE should I patch first?

CVE-2023-50252 currently ranks highest (64/100): php-svg-lib is an SVG file parsing / rendering library.

Products

• php-svg-lib

RSS feed for dompdf · ← Back to latest CVEs