Vulnerabilidades en dompdf
16 resultadosAnálisis Vexday
O dompdf apresenta 16 vulnerabilidades catalogadas, sendo 4 críticas, com 6 publicadas nos últimos 90 dias indicando exposição recente e contínua. A fraqueza dominante (CWE-20, validação inadequada de entrada) reflete falhas de sanitização que podem impactar aplicações dependentes. Atualmente nenhuma está sob exploração ativa conhecida (KEV), mas o ritmo de descobertas recentes recomenda priorização em planos de atualização.
CVE-2023-50252HIGHphp-svg-lib unsafe attributes merge when parsing `use` tagEPSS 23.9%CVE-2023-23924CRITICALURI validation failure on SVG parsing in DompdfEPSS 3.6%CVE-2023-24813CRITICALURI validation failure on SVG parsing. Bypass of CVE-2023-23924EPSS 2.5%CVE-2023-50262MEDIUMDompdf possible DoS caused by infinite recursion when parsing SVG imagesEPSS 1.5%CVE-2021-3838CRITICALPHAR Deserialization in dompdf/dompdfEPSS 1.4%CVE-2022-2400MEDIUMExternal Control of File Name or Path in dompdf/dompdfEPSS 1.2%CVE-2022-0085LOWServer-Side Request Forgery (SSRF) in dompdf/dompdfEPSS 1.0%CVE-2024-25117MEDIUMphp-svg-lib lacks path validation on font through SVG inline styles EPSS 0.9%CVE-2021-3902CRITICALImproper Restriction of XML External Entity Reference in dompdf/dompdfEPSS 0.9%CVE-2023-50251MEDIUMphp-svg-lib possible DoS caused by infinite recursion when parsing SVG documentEPSS 0.9%CVE-2026-59941MEDIUMDompdf: Uncontrolled resource consumption based on declared BMP dimensionsEPSS 0.6%CVE-2026-55555LOWDompdf: File existence oracle via font-face stylesheet declarationEPSS 0.5%CVE-2026-59942MEDIUMDompdf: Denial of Service (DoS) via Resource Exhaustion using Oversized Image BitmapsEPSS 0.5%CVE-2026-56722MEDIUMDompdf: Local file read due to improper file path validation in SVG images encoded as data-URIEPSS 0.4%CVE-2026-55554LOWDompdf: Chroot Validation BypassEPSS 0.3%CVE-2026-59943MEDIUMDompdf: Embedded SVG images can leak existence of files and directories within the filesystemEPSS 0.3%