VulertSecurity VulertSecurity

Vulnerability Database · Debian · php-dompdf · Version

php-dompdf 3.0.0 dfsg-2

3.0.0 dfsg-2 is affected by 10 vulnerabilities.

The vulnerabilities that cover this exact version are listed below with the fixed version to move to.

Critical 1 High 1 Medium 1 Low 0 Unrated 7

All php-dompdf versions & vulnerabilities → Search the database for this package →
Database updated 23/Oct/2026

Concerned about your application's security?

Vulert continues monitoring your dependencies and alerts you when new vulnerabilities are disclosed. No installation and no source-code access required.

01 Vulnerabilities affecting this version

php-dompdf 3.0.0 dfsg-2 vulnerabilities

10 vulnerabilities cover php-dompdf 3.0.0 dfsg-2. Open the full list in the database.

Vulnerability Severity Fixed version Disclosed
Critical PHAR Deserialization Vulnerability in DomPDF Package 9.8 critical No fix published 15 Nov 2024
Recursive Chaining Vulnerability in Dompdf Package Could Lead to Resource Exhaustion 7.5 high No fix published 13 Dec 2023
External Control of File Name or Path in php-dompdf - CVE-2022-2400 5.3 medium No fix published 18 Jul 2022
Memory Amplification Vulnerability in php-dompdf: CVE-2026-59941 N/A unrated No fix published 28 Jul 2026
Denial of Service Vulnerability in php-dompdf: Resource Exhaustion via Large Images N/A unrated No fix published 28 Jul 2026
Critical SVG Rendering Vulnerability in php-dompdf: Filesystem Information Leak N/A unrated No fix published 28 Jul 2026
Arbitrary File Read Vulnerability in php-dompdf - CVE-2026-56722 N/A unrated No fix published 28 Jul 2026
Chroot Escape Vulnerability in php-dompdf: Risk of Unauthorized File Access N/A unrated No fix published 28 Jul 2026
File Existence Oracle Attack in Dompdf: PHP Package Vulnerability N/A unrated No fix published 28 Jul 2026
Resource Exhaustion Vulnerability in php-dompdf: SVG Chaining Issue N/A unrated No fix published 13 Dec 2023

Looking for another version, or everything Vulert holds for php-dompdf?

All versions → Full vulnerability list →

Subscribe to Vulert on Telegram
Daily digest of new CVEs, critical and high severity, affected packages and fixes — plus a weekly roundup.
Join the channel →

Questions

About php-dompdf 3.0.0 dfsg-2

Is php-dompdf 3.0.0 dfsg-2 vulnerable?

Yes. 10 vulnerabilities in the Vulert database cover php-dompdf 3.0.0 dfsg-2: 1 critical, 1 high, 1 medium and 0 low, plus 7 not yet rated. Each entry above names the fixed version to move to.

How do I monitor php-dompdf for upcoming vulnerabilities?

Upload the manifest or SBOM for your application at vulert.com/scanner and Vulert keeps checking the php-dompdf version you actually run against new disclosures, then alerts you when one affects it. There is no installation and no source-code access required.