HIGH
GHSA-9mgx-552f-59p6
TCPDF missing certificate validation
Quick fix
GHSA-9mgx-552f-59p6 — tecnickcom/tcpdf: upgrade to the fixed version with the command below.
composer require tecnickcom/tcpdf:^6.8.0Details
An issue was discovered in TCPDF before 6.8.0. If libcurl is used, CURLOPT_SSL_VERIFYHOST and CURLOPT_SSL_VERIFYPEER are set unsafely.
Are you affected?
Enter the version of the package you're using.
Affected packages
Packagist/tecnickcom/tcpdf
Introduced in:
0Fixed in: 6.8.0Fix
composer require tecnickcom/tcpdf:^6.8.0