dompdf project
Security Risk Profile
Security Risk Score
Comprehensive risk assessment based on 18 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from December 7, 2015 to present
Threat Assessment
Severity Distribution
Exploit Likelihood
Age Distribution
Common Weaknesses (CWE)
Most Affected Products
Recent Vulnerabilities
See more →Dompdf: Embedded SVG images can leak existence of files and directories within the filesystem
Dompdf: Denial of Service (DoS) via Resource Exhaustion using Oversized Image Bitmaps
Dompdf: Uncontrolled resource consumption based on declared BMP dimensions
Dompdf: Local file read due to improper file path validation in SVG images encoded as data-URI
Dompdf: File existence oracle via font-face stylesheet declaration
Dompdf: Chroot Validation Bypass
Improper Restriction of XML External Entity Reference in dompdf/dompdf
Dompdf possible DoS caused by infinite recursion when parsing SVG images
PHAR Deserialization in dompdf/dompdf
URI validation failure on SVG parsing. Bypass of CVE-2023-23924
Monitor dompdf project in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.