Packagist/setasign/fpdi CVE-2025-54869: medium, EPSS 0.31%
FPDI allows Memory Exhaustion (OOM) in PDF Parser which leads to Denial of Service
Action: Upgrade setasign/fpdi to 2.6.4 or later.
composer require setasign/fpdi:2.6.4Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.6.4 | - |
Fixed versions
| 2.6.4 |
Sources
- osv: GHSA-jxhh-4648-vpp3
- https://github.com/Setasign/FPDI/security/advisories/GHSA-jxhh-4648-vpp3
- https://nvd.nist.gov/vuln/detail/CVE-2025-54869
- https://github.com/Setasign/FPDI/commit/ba671ba9221cffd32c2dda87316c19f522a1c5f0
- https://github.com/Setasign/FPDI
CVE-2025-54869 · published · modified · JSON