CVE-2024-22641
TCPDF version 6.6.5 and before is vulnerable to ReDoS (Regular Expression Denial of Service) if parsing an untrusted SVG file.
Published Updated
PatchFirst · Latest vulnerabilities
Vulnerabilities published for tcpdf in the last 30 days: 0. Listed in the KEV catalogue: 0.
Vulnerabilities: 2
TCPDF version 6.6.5 and before is vulnerable to ReDoS (Regular Expression Denial of Service) if parsing an untrusted SVG file.
TCPDF version <=6.6.5 is vulnerable to ReDoS (Regular Expression Denial of Service) if parsing an untrusted HTML page with a crafted color.
Check your installed stack and versions against the current vulnerability feeds.