{"id":"DRUPAL-CONTRIB-2022-048","aliases":[],"status":"published","description":"This module enables you to generate print versions of content.  \nSome installations of the module make use of the dompdf/dompdf third-party dependency.  \nSecurity vulnerabilities exist for versions of dompdf/dompdf \u003c 2.0.0\n\nSee the library release notes for more detail: \u003chttps://github.com/dompdf/dompdf/releases/tag/v2.0.0\u003e\n\n### Note on 3rd party vulnerabilities\n\nThis security advisory corresponds to a 3rd party vulnerability. Normally the Drupal Security Team would not issue advisories related to 3rd party code that is shipped separately from a module per our policy (most recent update is [PSA-2019-09-04](https://www.drupal.org/psa-2019-09-04)). In this case, because the module required a specific version and could not be updated without a change to the Drupal module we do issue an advisory.","facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2022-07-13T15:44:42Z","modified":"2026-09-10T03:45:44Z","fixes":[{"ecosystem":"Packagist:https://packages.drupal.org/8","package":"drupal/entity_print","fixed_in":["2.6.0"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Packagist:https://packages.drupal.org/8","package":"drupal/entity_print","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.0"}]}]}],"references":[{"url":"https://www.drupal.org/sa-contrib-2022-048","tags":["web"]}],"sources":{"osv":[{"id":"DRUPAL-CONTRIB-2022-048","description":"This module enables you to generate print versions of content.  \nSome installations of the module make use of the dompdf/dompdf third-party dependency.  \nSecurity vulnerabilities exist for versions of dompdf/dompdf \u003c 2.0.0\n\nSee the library release notes for more detail: \u003chttps://github.com/dompdf/dompdf/releases/tag/v2.0.0\u003e\n\n### Note on 3rd party vulnerabilities\n\nThis security advisory corresponds to a 3rd party vulnerability. Normally the Drupal Security Team would not issue advisories related to 3rd party code that is shipped separately from a module per our policy (most recent update is [PSA-2019-09-04](https://www.drupal.org/psa-2019-09-04)). In this case, because the module required a specific version and could not be updated without a change to the Drupal module we do issue an advisory.","status":"published","published":"2022-07-13T15:44:42Z","modified":"2026-09-10T03:45:44.697460037Z","updated_at":"2026-11-02T15:46:13.584509Z"}]}}