Php-svg-lib (Dompdf) - vulnerabilities (CVEs)

3 CVEs, 0 in the last 30 days, 17 known versions, newest CVE from 2024-02-21. Vendor: Dompdf.

CVEs of Php-svg-lib

• CVE-2024-25117 - CVSS 9.8 (critical), 2024-02-21: php-svg-lib is a scalable vector graphics (SVG) file parsing/rendering library. Prior to version 0.5.2, php-svg-lib fails to validate that font-family doesn't…
• CVE-2023-50252 - CVSS 9.8 (critical), 2023-12-12: php-svg-lib is an SVG file parsing / rendering library. Prior to version 0.5.1, when handling `<use>` tag that references an `<image>` tag, it merges the…
• CVE-2023-50251 - CVSS 7.5 (high), 2023-12-12: php-svg-lib is an SVG file parsing / rendering library. Prior to version 0.5.1, when parsing the attributes passed to a `use` tag inside an svg document, an…