Tcpdf
Source repositories
CVEs (2)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2024-22641 | Hig | 0.49 | 7.5 | 0.01 | May 28, 2024 | TCPDF version 6.6.5 and before is vulnerable to ReDoS (Regular Expression Denial of Service) if parsing an untrusted SVG file. | ||
| CVE-2017-6100 | Hig | 0.49 | 7.5 | 0.01 | Feb 23, 2017 | tcpdf before 6.2.0 uploads files from the server generating PDF-files to an external FTP. |
- risk 0.49cvss 7.5epss 0.01
TCPDF version 6.6.5 and before is vulnerable to ReDoS (Regular Expression Denial of Service) if parsing an untrusted SVG file.
- risk 0.49cvss 7.5epss 0.01
tcpdf before 6.2.0 uploads files from the server generating PDF-files to an external FTP.