| Release | Version |
|---|---|
| jessie | 0.6.1+dfsg-2+deb8u1 |
| stretch | 0.6.2+dfsg-3 |
| buster | 0.6.2+dfsg-3+deb10u2 |
| bullseye | 0.6.2+dfsg-3.1 |
| bookworm | 2.0.3+dfsg-1 |
| trixie | 3.0.0+dfsg-2 |
| sid | 3.0.0+dfsg-2 |
| Bug | jessie | stretch | buster | bullseye | bookworm | trixie | sid | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2023-50262 | vulnerable | vulnerable | fixed | vulnerable (no DSA) | vulnerable (no DSA) | fixed | fixed | Dompdf is an HTML to PDF converter for PHP. When parsing SVG images Do ... |
| CVE-2023-24813 | vulnerable | vulnerable | fixed | fixed | fixed | fixed | fixed | Dompdf is an HTML to PDF converter written in php. Due to the differen ... |
| CVE-2022-28368 | vulnerable | fixed | fixed | fixed | fixed | fixed | fixed | Dompdf 1.2.1 allows remote code execution via a .php file in the src:u ... |
| CVE-2022-2400 | vulnerable | vulnerable | fixed | vulnerable (no DSA) | fixed | fixed | fixed | External Control of File Name or Path in GitHub repository dompdf/domp ... |
| CVE-2021-3902 | vulnerable | vulnerable | fixed | fixed | fixed | fixed | fixed | An improper restriction of external entities (XXE) vulnerability in do ... |
| CVE-2021-3838 | vulnerable | vulnerable | fixed | vulnerable (no DSA) | fixed | fixed | fixed | DomPDF before version 2.0.0 is vulnerable to PHAR deserialization due ... |
| Bug | Description |
|---|---|
| CVE-2023-23924 | Dompdf is an HTML to PDF converter. The URI validation on dompdf 2.0.1 ... |
| CVE-2022-41343 | registerFont in FontMetrics.php in Dompdf before 2.0.1 allows remote f ... |
| CVE-2022-0085 | Server-Side Request Forgery (SSRF) in GitHub repository dompdf/dompdf ... |
| CVE-2014-5013 | DOMPDF before 0.6.2 allows remote code execution, a related issue to C ... |
| CVE-2014-5012 | DOMPDF before 0.6.2 allows denial of service. |
| CVE-2014-5011 | DOMPDF before 0.6.2 allows Information Disclosure. |
| CVE-2014-2383 | dompdf.php in dompdf before 0.6.1, when DOMPDF_ENABLE_PHP is enabled, ... |
| CVE-2010-4879 | PHP remote file inclusion vulnerability in dompdf.php in dompdf 0.6.0 ... |
| DSA / DLA | Description |
|---|---|
| DLA-3495-2 | php-dompdf - regression update |
| DLA-3495-1 | php-dompdf - security update |