{"action":"Upgrade dompdf/dompdf to 2.0.0 or later.","affected":[{"fixed":"2.0.0","introduced":"0"}],"component":"dompdf/dompdf","cve_ids":["CVE-2022-0085"],"ecosystem":"Packagist","epss":0.00999,"exploited":false,"fixed_versions":["2.0.0"],"ghsa_id":"GHSA-pf6p-25r2-fx45","id":"tcs_01M5KF6A9T1DPZY45C3AR7BVN5","modified_at":"2023-11-08T04:07:28.174206Z","published_at":"2022-06-29T00:00:27Z","references":["https://osv.dev/vulnerability/GHSA-pf6p-25r2-fx45","https://nvd.nist.gov/vuln/detail/CVE-2022-0085","https://github.com/dompdf/dompdf/commit/bb1ef65011a14730b7cfbe73506b4bb8a03704bd","https://github.com/FriendsOfPHP/security-advisories/blob/master/dompdf/dompdf/CVE-2022-0085.yaml","https://github.com/dompdf/dompdf","https://huntr.dev/bounties/73dbcc78-5ba9-492f-9133-13bbc9f31236"],"severity":{"label":"medium","score":5.3},"sources":[{"source":"osv","source_id":"GHSA-pf6p-25r2-fx45","url":"https://osv.dev/vulnerability/GHSA-pf6p-25r2-fx45"}],"summary":"Server-Side Request Forgery in dompdf/dompdf"}