MEDIUMPackagist
GHSA-4p8j-vhjm-6pvw· CVE-2024-56519TCPDF lacks SVG sanitization
Modified: 11/3/2025
package
Packagist/tecnickcom/tcpdf
pkg:packagist/tecnickcom/tcpdf
CRITICAL9.8Packagist
GHSA-5hw4-m7f3-hhx8· CVE-2018-17057TCPDF vulnerable to attackers triggering deserialization of arbitrary data
Modified: 2/16/2024
HIGHPackagist
GHSA-9mgx-552f-59p6· CVE-2024-56521TCPDF missing certificate validation
Modified: 12/27/2024
MEDIUM6.1Packagist
GHSA-g9wg-98c2-qv3v· CVE-2024-32489TCPDF Cross-site Scripting vulnerability
Modified: 11/3/2025
MEDIUMPackagist
GHSA-mx3p-fhpw-x6rv· CVE-2024-22640TCPDF vulnerable to Regular Expression Denial of Service
Modified: 11/4/2025
MEDIUMPackagist
GHSA-qx95-cwh6-9mvq· CVE-2024-56527TCPDF missing character escape on error messages
Modified: 11/4/2025
MEDIUM6.2Packagist
GHSA-rmv2-8jjc-23xw· CVE-2024-51058TCPDF Local File Inclusion vulnerability
Modified: 11/3/2025
HIGH7.5Packagist
GHSA-w95c-7994-ghpr· CVE-2024-56522TCPDF has incorrect comparison
Modified: 11/3/2025