Packagist/tecnickcom/tcpdf CVE-2024-51058: medium 6.2, EPSS 0.81%

TCPDF Local File Inclusion vulnerability

Action: Upgrade tecnickcom/tcpdf to 6.7.6 or later.

composer require tecnickcom/tcpdf:6.7.6

Affected

Fixed versions

Sources

• osv: GHSA-rmv2-8jjc-23xw
• https://nvd.nist.gov/vuln/detail/CVE-2024-51058
• https://github.com/tecnickcom/TCPDF/commit/bfa7d2b6d455ebf72ebe3d48fbd487ee5a1f6f3b
• https://github.com/saravana-hackz/vulnerability-research/tree/main/CVE-2024-51058
• https://github.com/tecnickcom/TCPDF
• https://lists.debian.org/debian-lts-announce/2025/06/msg00004.html

CVE-2024-51058 · published 2024-11-26T18:38:52Z · modified 2025-11-03T23:05:57.754214Z · JSON