PatchTheCVEtcpdf project vulnerabilities
Recent CVEs affecting tcpdf project products. 8 tracked.
tcpdf project has 8 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 7. Most recent: 2024-12-27. Highest priority: CVE-2024-22640 (score 54/100).
- CVE-2024-56527 HIGH 7.5 UPGRADE An issue was discovered in TCPDF before 6.8.0
- CVE-2024-56522 HIGH 7.5 UPGRADE An issue was discovered in TCPDF before 6.8.0
- CVE-2024-56521 CRITICAL 9.8 UPGRADE An issue was discovered in TCPDF before 6.8.0
- CVE-2024-56519 HIGH 7.5 UPGRADE An issue was discovered in TCPDF before 6.8.0
- CVE-2024-51058 MEDIUM 6.2 DOWNGRADE Local File Inclusion (LFI) vulnerability has been discovered in TCPDF 6.7.5
- CVE-2024-32489 MEDIUM 6.1 UPGRADE TCPDF before 6.7.4 mishandles calls that use HTML syntax.
- CVE-2024-22641 HIGH 7.5 UPGRADE TCPDF version 6.6.5 and before is vulnerable to ReDoS (Regular Expression Denial of Service) if parsing an unt
- CVE-2024-22640 HIGH 7.5 UPGRADE MITIGATE TCPDF version <=6.6.5 is vulnerable to ReDoS (Regular Expression Denial of Service) if parsing an untrusted HT
FAQ
How do I fix tcpdf project vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is tcpdf project being exploited right now?
None of the tracked tcpdf project CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which tcpdf project CVE should I patch first?
CVE-2024-22640 currently ranks highest (54/100): TCPDF version <=6.6.5 is vulnerable to ReDoS (Regular Expression Denial of Service) if parsing an untrusted HT.