Vulnerability Database · Packagist · dompdf/dompdf · Version
dompdf/dompdf 2.0.2
2.0.2 is affected by 8 vulnerabilities.
The vulnerabilities that cover this exact version are listed below with the fixed version to move to.
Critical 1 High 0 Medium 5 Low 2 Unrated 0
-
Database updated 23/Oct/2026
Concerned about your application's security?
Vulert continues monitoring your dependencies and alerts you when new vulnerabilities are disclosed. No installation and no source-code access required.
01 Vulnerabilities affecting this version
dompdf/dompdf 2.0.2 vulnerabilities
8 vulnerabilities cover dompdf/dompdf 2.0.2. Open the full list in the database.
| Vulnerability | Severity | Fixed version | Disclosed |
|---|---|---|---|
| CVE-2023-24813: Dompdf SVG Parsing URI Validation Failure | 10.0 critical | 2.0.3 | 07 Feb 2023 |
| CVE-2026-59943: Dompdf SVG Image Rendering Vulnerability Leading to File Existence Leakage | 6.3 medium | 3.1.6 | 22 Jul 2026 |
| CVE-2026-59942: Dompdf Denial of Service via Resource Exhaustion from Oversized Image Bitmaps | 6.3 medium | 3.1.6 | 22 Jul 2026 |
| CVE-2026-59941: dompdf Uncontrolled Resource Consumption Vulnerability | 6.3 medium | 3.1.6 | 22 Jul 2026 |
| CVE-2026-56722: Dompdf Local File Read Vulnerability via SVG Data-URI | 6.3 medium | 3.1.6 | 22 Jul 2026 |
| Denial of Service in dompdf/dompdf: Infinite Recursion when Parsing SVG Images | 5.3 medium | 2.0.4 | 13 Dec 2023 |
| CVE-2026-55555: Dompdf File Existence Oracle Vulnerability Leading to Memory Exhaustion | 2.3 low | 3.1.6 | 22 Jul 2026 |
| CVE-2026-55554: Dompdf Chroot Validation Bypass Vulnerability | 2.3 low | 3.1.6 | 22 Jul 2026 |
Looking for another version, or everything Vulert holds for dompdf/dompdf?
Questions
About dompdf/dompdf 2.0.2
Is dompdf/dompdf 2.0.2 vulnerable?
Yes. 8 vulnerabilities in the Vulert database cover dompdf/dompdf 2.0.2: 1 critical, 0 high, 5 medium and 2 low. Each entry above names the fixed version to move to.
How do I monitor dompdf/dompdf for upcoming vulnerabilities?
Upload the manifest or SBOM for your application at vulert.com/scanner and Vulert keeps checking the dompdf/dompdf version you actually run against new disclosures, then alerts you when one affects it. There is no installation and no source-code access required.