Known vulnerabilities in php-svg-lib
Vendor:
dompdf
Software:
php-svg-lib
Software CPE:
cpe:2.3:a:dompdf:php-svg-lib:*:*:*:*:*:*:*:*
Website:
https://github.com/dompdf
Total vulnerabilities:
3
Public exploits:
0
Known exploited (KEV):
0
Breakdown by Severity Chart
Vulnerabilities (3)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU87176 - Improper Control of Generation of Code ('Code Injection') CVE-2024-25117 |
CWE-94 | High | 0.5.2 | 07.03.2024 |
SB2024030706 SB2024030707 SB2024071178 |
||
| #VU87175 - Deserialization of Untrusted Data CVE-2023-50252 |
CWE-502 | High | 0.5.1 | 07.03.2024 |
SB2024013022 SB2024071178 |
||
| #VU85893 - Uncontrolled Recursion CVE-2023-50251 |
CWE-674 | Medium | 0.5.1 | 30.01.2024 |
SB2024013022 SB2024013025 SB2024071178 |