{"action":"Upgrade dompdf/dompdf to 2.0.3 or later.","affected":[{"fixed":"2.0.3","introduced":"2.0.2"}],"component":"dompdf/dompdf","cve_ids":["CVE-2023-24813"],"ecosystem":"Packagist","epss":0.0249,"exploited":false,"fixed_versions":["2.0.3"],"ghsa_id":"GHSA-56gj-mvh6-rp75","id":"tcs_01M5KEVPBVVFATVGN69MHA7VF7","modified_at":"2026-09-10T03:49:51.854084469Z","published_at":"2023-02-07T18:16:23Z","references":["https://osv.dev/vulnerability/GHSA-56gj-mvh6-rp75","https://github.com/dompdf/dompdf/security/advisories/GHSA-56gj-mvh6-rp75","https://nvd.nist.gov/vuln/detail/CVE-2023-24813","https://github.com/dompdf/dompdf/commit/95009ea98230f9b084b040c34e3869ef3dccc9aa","https://github.com/dompdf/dompdf"],"severity":{"label":"critical","score":10},"sources":[{"source":"osv","source_id":"GHSA-56gj-mvh6-rp75","url":"https://osv.dev/vulnerability/GHSA-56gj-mvh6-rp75"}],"summary":"URI validation failure on SVG parsing. Bypass of CVE-2023-23924"}