Skip to main content
cve.nowby Sazabi
← Packagist
PackagistPackage

tecnickcom/tcpdf

8 known vulnerabilities (1 critical, 4 high, 2 medium), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
8 · 1 critical, 4 high, 2 medium
Registry
Packagist

Advisories 8

  • An issue was discovered in TCPDF before 6.8.0.

    Affected: fixed in 6.8.0.

  • An issue was discovered in TCPDF before 6.8.0.

    Affected: fixed in 6.8.0.

  • CVE-2024-56521Critical 9.8

    An issue was discovered in TCPDF before 6.8.0.

    Affected: fixed in 6.8.0.

  • An issue was discovered in TCPDF before 6.8.0.

    Affected: fixed in 6.8.0.

  • CVE-2024-51058Medium 6.2

    Local File Inclusion (LFI) vulnerability has been discovered in TCPDF 6.7.5.

    Affected: fixed in 6.7.6.

  • TCPDF version <=6.6.5 is vulnerable to ReDoS (Regular Expression Denial of Service) if parsing an untrusted HTML page with a crafted color.

    Affected: fixed in 6.7.5.

  • CVE-2024-32489Medium 6.1

    TCPDF before 6.7.4 mishandles calls that use HTML syntax.

    Affected: fixed in 6.7.4.

  • An issue was discovered in TCPDF before 6.2.22.

    Affected: fixed in 6.2.22.