Packagist/tecnickcom/tcpdf CVE-2024-56521: critical 9.8, EPSS 0.78%
TCPDF missing certificate validation
Action: Upgrade tecnickcom/tcpdf to 6.8.0 or later.
composer require tecnickcom/tcpdf:6.8.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 6.8.0 | - |
Fixed versions
| 6.8.0 |
Sources
- osv: GHSA-9mgx-552f-59p6
- nvd: CVE-2024-56521
- https://github.com/tecnickcom/TCPDF/commit/aab43ab0a824e956276141a28a24c7c0be20f554
- https://github.com/tecnickcom/TCPDF
- https://github.com/tecnickcom/TCPDF/compare/6.7.8...6.8.0
- https://tcpdf.org
CVE-2024-56521 · published · modified · JSON