Vulnerabilities in dompdf
10 resultsCVE-2023-50252HIGHphp-svg-lib unsafe attributes merge when parsing `use` tagEPSS 23.9%CVE-2023-23924CRITICALURI validation failure on SVG parsing in DompdfEPSS 3.6%CVE-2023-24813CRITICALURI validation failure on SVG parsing. Bypass of CVE-2023-23924EPSS 2.5%CVE-2023-50262MEDIUMDompdf possible DoS caused by infinite recursion when parsing SVG imagesEPSS 1.5%CVE-2021-3838CRITICALPHAR Deserialization in dompdf/dompdfEPSS 1.4%CVE-2024-25117MEDIUMphp-svg-lib lacks path validation on font through SVG inline styles EPSS 0.9%CVE-2021-3902CRITICALImproper Restriction of XML External Entity Reference in dompdf/dompdfEPSS 0.9%CVE-2022-2400MEDIUMExternal Control of File Name or Path in dompdf/dompdfEPSS 0.9%CVE-2023-50251MEDIUMphp-svg-lib possible DoS caused by infinite recursion when parsing SVG documentEPSS 0.9%CVE-2022-0085LOWServer-Side Request Forgery (SSRF) in dompdf/dompdfEPSS 0.8%