{"id":"MGASA-2019-0053","aliases":[],"status":"published","title":"Updated php-tcpdf packages fix security vulnerabilities","description":"- Fix for security vulnerability: Using the phar:// wrapper it was\npossible to trigger the unserialization of user provided data.\n- Merge various fixes for PHP 7.3 compatibility and security.","facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2019-01-30T19:39:18Z","modified":"2026-04-16T04:26:32Z","fixes":[{"ecosystem":"Mageia:6","package":"php-tcpdf","fixed_in":["6.2.26-1.mga6"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Mageia:6","package":"php-tcpdf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.2.26-1.mga6"}]}]}],"references":[{"url":"https://advisories.mageia.org/MGASA-2019-0053.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=23699","tags":["report"]},{"url":"https://github.com/tecnickcom/TCPDF/blob/master/CHANGELOG.TXT","tags":["web"]}],"sources":{"osv":[{"id":"MGASA-2019-0053","title":"Updated php-tcpdf packages fix security vulnerabilities","description":"- Fix for security vulnerability: Using the phar:// wrapper it was\npossible to trigger the unserialization of user provided data.\n- Merge various fixes for PHP 7.3 compatibility and security.\n","status":"published","published":"2019-01-30T19:39:18Z","modified":"2026-04-16T04:26:32.944943Z","updated_at":"2026-11-02T15:49:40.793816Z"}]}}