Search for packages
| purl | pkg:composer/tecnickcom/tcpdf@6.0.071 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-659t-wh1f-w7gw
Aliases: CVE-2024-32489 GHSA-g9wg-98c2-qv3v |
TCPDF Cross-site Scripting vulnerability TCPDF before 6.7.4 mishandles calls that use HTML syntax. |
Affected by 1 other vulnerability. |
|
VCID-tkxb-gdhj-hyb6
Aliases: CVE-2024-22640 GHSA-mx3p-fhpw-x6rv |
TCPDF vulnerable to Regular Expression Denial of Service TCPDF version <= 6.7.4 is vulnerable to ReDoS (Regular Expression Denial of Service) if parsing an untrusted HTML page with a crafted color. |
Affected by 0 other vulnerabilities. |
|
VCID-yagk-nmcx-d3bv
Aliases: CVE-2018-17057 GHSA-5hw4-m7f3-hhx8 |
Deserialization of Untrusted Data Attackers can trigger deserialization of arbitrary data via the `phar://` wrapper. |
Affected by 2 other vulnerabilities. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2026-06-01T07:59:36.652239+00:00 | GitLab Importer | Affected by | VCID-tkxb-gdhj-hyb6 | https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/tecnickcom/tcpdf/CVE-2024-22640.yml | 38.6.0 |
| 2026-06-01T07:58:40.990636+00:00 | GitLab Importer | Affected by | VCID-659t-wh1f-w7gw | https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/tecnickcom/tcpdf/CVE-2024-32489.yml | 38.6.0 |
| 2026-05-31T09:49:28.336218+00:00 | GitLab Importer | Affected by | VCID-yagk-nmcx-d3bv | https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/tecnickcom/tcpdf/CVE-2018-17057.yml | 38.6.0 |