Known vulnerabilities in TCPDF

Software: TCPDF
Software CPE: cpe:2.3:a:nicola_asuni:tcpdf:*:*:*:*:*:*:*:*
Total vulnerabilities: 6
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting TCPDF TCPDF is affected by 6 known vulnerabilities: 1 high, 1 medium, 4 low Critical High Medium Low

Vulnerabilities (6)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU102267 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-56519
CWE-79 Low
No
No
6.8.0 30.12.2024 SB20241230290
SB20241230307
SB20241230308
and 2 more
#VU102264 - Improper Certificate Validation
CVE-2024-56521
CWE-295 Low
No
No
6.8.0 30.12.2024 SB20241230290
SB20241230307
SB20241230308
and 2 more
#VU102263 - Incorrect Comparison
CVE-2024-56522
CWE-697 Low
No
No
6.8.0 30.12.2024 SB20241230290
SB20241230307
SB20241230308
and 2 more
#VU102258 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-56527
CWE-79 Low
No
No
6.8.0 30.12.2024 SB20241230290
SB20241230307
SB20241230308
and 2 more
#VU99356 - Inefficient Regular Expression Complexity
CVE-2024-22641
CWE-1333 Medium
No
No
6.7.7 28.10.2024 SB2024102817
SB2024102820
SB2024102821
and 1 more
#VU18050 - Deserialization of Untrusted Data
CVE-2018-17057
CWE-502 High
Available
No
6.2.22 21.03.2019 SB2019032103
SB2019071702