VulertSecurity VulertSecurity

Vulnerability Database · Packagist · tecnickcom/tcpdf · Version

tecnickcom/tcpdf 6.0.078

6.0.078 is affected by 10 vulnerabilities.

The vulnerabilities that cover this exact version are listed below with the fixed version to move to.

Critical 1 High 2 Medium 7 Low 0 Unrated 0

All tecnickcom/tcpdf versions & vulnerabilities → Search the database for this package →
Database updated 23/Oct/2026

Concerned about your application's security?

Vulert continues monitoring your dependencies and alerts you when new vulnerabilities are disclosed. No installation and no source-code access required.

01 Vulnerabilities affecting this version

tecnickcom/tcpdf 6.0.078 vulnerabilities

10 vulnerabilities cover tecnickcom/tcpdf 6.0.078. Open the full list in the database.

Vulnerability Severity Fixed version Disclosed
CVE-2018-17057: TCPDF vulnerable to attackers triggering deserialization of arbitrary data 9.8 critical 6.2.22 06 Oct 2022
CVE-2024-56521: TCPDF Package Suffers from Insecure Certificate Validation 8.2 high 6.8.0 27 Dec 2024
CVE-2024-56522: TCPDF Incorrect Comparison Vulnerability 7.5 high 6.8.0 27 Dec 2024
CVE-2024-51058: TCPDF Local File Inclusion Vulnerability 6.2 medium 6.7.6 26 Nov 2024
TCPDF Cross-site Scripting vulnerability in tecnickcom/tcpdf 6.1 medium 6.7.4 15 Apr 2024
CVE-2024-56519: TCPDF SVG Font-family Attribute Sanitization Vulnerability 5.3 medium 6.8.0 27 Dec 2024
CVE-2024-56527: TCPDF Error Function Lacks Character Escape Leading to Potential XSS Vulnerability N/A medium 6.8.0 27 Dec 2024
TCPDF Package Vulnerability: Missing Character Escape in Error Messages N/A medium 6.8.0 27 Dec 2024
Moderate Vulnerability in TCPDF: Incorrect Comparison in unserializeTCPDFtag N/A medium 6.8.0 27 Dec 2024
CVE-2024-22640: TCPDF Regular Expression Denial of Service N/A medium 6.7.5 19 Apr 2024

Looking for another version, or everything Vulert holds for tecnickcom/tcpdf?

All versions → Full vulnerability list →

Subscribe to Vulert on Telegram
Daily digest of new CVEs, critical and high severity, affected packages and fixes — plus a weekly roundup.
Join the channel →

Questions

About tecnickcom/tcpdf 6.0.078

Is tecnickcom/tcpdf 6.0.078 vulnerable?

Yes. 10 vulnerabilities in the Vulert database cover tecnickcom/tcpdf 6.0.078: 1 critical, 2 high, 7 medium and 0 low. Each entry above names the fixed version to move to.

How do I monitor tecnickcom/tcpdf for upcoming vulnerabilities?

Upload the manifest or SBOM for your application at vulert.com/scanner and Vulert keeps checking the tecnickcom/tcpdf version you actually run against new disclosures, then alerts you when one affects it. There is no installation and no source-code access required.