CVE-2026-56722
1 advisory.
Packagist/dompdf/dompdf CVE-2026-56722: medium, EPSS 0.45%
Dompdf: Local file read due to improper file path validation in SVG images encoded as data-URI
Action: Upgrade dompdf/dompdf to 3.1.6 or later.
composer require dompdf/dompdf:3.1.6Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 3.1.6 | - |
Fixed versions
| 3.1.6 |
Sources
- osv: GHSA-cx96-42px-69fm
- https://github.com/dompdf/dompdf/security/advisories/GHSA-cx96-42px-69fm
- https://github.com/dompdf/dompdf/commit/6a58996865db05d8fede748507e50ac4b8c5bfd0
- https://github.com/dompdf/dompdf/commit/bf7b02f642e26007dedc5a22b3d6e15f9931120a
- https://github.com/dompdf/dompdf
- https://github.com/dompdf/dompdf/releases/tag/v3.1.6
CVE-2026-56722 · published · modified · JSON