Tcpdf Project

    Dashboard / Vendors

    Products: 1
    Vulnerabilities: 9
    Known Exploited: 0
    1
    Critical Level Threats
    6
    High Level Threats
    2
    Medium Level Threats
    0
    Low Level Threats

    Vulnerabilities

    100806040200
    JanFebMarAprMayJunJulAugSepOctNovDec
    Critical Level Threats
    High Level Threats
    Medium Level Threats
    Low Level Threats

    Products Security index

    Actions
    Items Per Page

    Vulnerabilities

    CVE-2024-56521

    An issue was discovered in TCPDF before 6.8.0. If libcurl is used, CURLOPT_SSL_VERIFYHOST and CURLOPT_SSL_VERIFYPEER are set unsafely.

    Last Modified: Apr 21, 2025
    Published: Dec 27, 2024

    CVE-2024-56522

    An issue was discovered in TCPDF before 6.8.0. unserializeTCPDFtag uses != (aka loose comparison) and does not use a constant-time function to compare TCPDF tag hashes.

    Last Modified: Nov 03, 2025
    Published: Dec 27, 2024

    CVE-2024-56527

    An issue was discovered in TCPDF before 6.8.0. The Error function lacks an htmlspecialchars call for the error message.

    Last Modified: Nov 03, 2025
    Published: Dec 27, 2024

    CVE-2024-56519

    An issue was discovered in TCPDF before 6.8.0. setSVGStyles does not sanitize the SVG font-family attribute.

    Last Modified: Nov 03, 2025
    Published: Dec 27, 2024

    CVE-2024-51058

    Local File Inclusion (LFI) vulnerability has been discovered in TCPDF 6.7.5. This vulnerability enables a user to read arbitrary files from the server's file system through <img> src tag, potentially exposing sensitive information.

    Last Modified: Nov 03, 2025
    Published: Nov 26, 2024
    Items Per Page
    Tcpdf_Project Vulnerabilities & Security CVEs | CVE-DB