tecnickcom/tcpdf vulnerabilities (Packagist)

8 vulnerabilities.

• tecnickcom/tcpdf Packagist TCPDF missing character escape on error messages CVE-2024-56527 Fix available 7.5 HighDecember 27, 2024
• tecnickcom/tcpdf Packagist TCPDF has incorrect comparison CVE-2024-56522 Fix available 7.5 HighDecember 27, 2024
• tecnickcom/tcpdf Packagist TCPDF missing certificate validation CVE-2024-56521 Fix available 9.8 CriticalDecember 27, 2024
• tecnickcom/tcpdf Packagist TCPDF lacks SVG sanitization CVE-2024-56519 Fix available 7.5 HighDecember 27, 2024
• tecnickcom/tcpdf Packagist TCPDF Local File Inclusion vulnerability CVE-2024-51058 Fix available 6.2 MediumNovember 26, 2024
• tecnickcom/tcpdf Packagist TCPDF vulnerable to Regular Expression Denial of Service CVE-2024-22640 Public exploitFix available 7.5 HighApril 19, 2024
• tecnickcom/tcpdf Packagist TCPDF Cross-site Scripting vulnerability CVE-2024-32489 Fix available 6.1 MediumApril 15, 2024
• tecnickcom/tcpdf Packagist TCPDF vulnerable to attackers triggering deserialization of arbitrary data CVE-2018-17057 Public exploitFix available EPSS 26.2% 9.8 CriticalSeptember 14, 2018