Junglewise Threat Intelligence

Dompdf's usage of vulnerable version of phenx/php-svg-lib leads to restriction bypass and potential RCE

Severity: low · CVSS 3.1 · Published 2024-02-22

Technologies: phenx/php-svg-lib (Packagist). Vendors: Packagist.

Executive brief

Dompdf's usage of vulnerable version of phenx/php-svg-lib leads to restriction bypass and potential RCE

Affected products

  • Packagist phenx/php-svg-lib

Related threats