Debian/php-dompdf: critical 9.8
Dompdf is an HTML to PDF converter written in php. Due to the difference in the attribute parser of Dompdf and php-svg-lib, an attacker can still call arbitrary URLs with arbitrary protocols. Dompdf p
Action: Upgrade php-dompdf to 2.0.3+dfsg-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.0.3+dfsg-1 | - |
Fixed versions
| 2.0.3+dfsg-1 |
Sources
published · modified · JSON