Every CVE Search/ Get API key

DRUPAL-CONTRIB-2022-050

No scoreFix available

This module enables you to generate PDF versions of content.

Some installations of the module make use of the dompdf/dompdf third-party dependency.

Security vulnerabilities exist for versions of dompdf/dompdf before 2.0.0 as described in the 2.0.0 release notes.

What each source reports

OSV No score

This module enables you to generate PDF versions of content.

Some installations of the module make use of the dompdf/dompdf third-party dependency.

Security vulnerabilities exist for versions of dompdf/dompdf before 2.0.0 as described in the 2.0.0 release notes.

Record
DRUPAL-CONTRIB-2022-050
Updated
2026-11-02

Affected packages

Affected packages
PackageAffectedFixed
drupal/pdf_api
Packagist:https://packages.drupal.org/8
before 2.2.2
2.2.2

History

History
RecordedChangedSources
first indexedOSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

DRUPAL-CONTRIB-2022-050 is a vulnerability with no CVSS score yet in drupal/pdf_api, published July 27, 2022. No source lists public exploit code. Fixed in drupal/pdf_api 2.2.2.

References

MoveEnter Open