{"action":"Upgrade phenx/php-svg-lib to 0.5.2 or later.","affected":[{"fixed":"0.5.2","introduced":"0"}],"component":"phenx/php-svg-lib","cve_ids":[],"ecosystem":"Packagist","exploited":false,"fixed_versions":["0.5.2"],"ghsa_id":"GHSA-97m3-52wr-xvv2","id":"tcs_01M5KEZT41VN9HKHKGGAESSVRF","modified_at":"2024-11-30T05:28:01.236712Z","published_at":"2024-02-22T18:15:41Z","references":["https://osv.dev/vulnerability/GHSA-97m3-52wr-xvv2","https://github.com/dompdf/dompdf/security/advisories/GHSA-97m3-52wr-xvv2","https://github.com/dompdf/php-svg-lib/security/advisories/GHSA-f3qr-qr4x-j273","https://github.com/dompdf/php-svg-lib/commit/732faa9fb4309221e2bd9b2fda5de44f947133aa","https://github.com/dompdf/dompdf"],"severity":{"label":"critical","score":10},"sources":[{"source":"osv","source_id":"GHSA-97m3-52wr-xvv2","url":"https://osv.dev/vulnerability/GHSA-97m3-52wr-xvv2"}],"summary":"Dompdf's usage of vulnerable version of phenx/php-svg-lib leads to restriction bypass and potential RCE"}