https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T17:29:32.251834+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-98382 EUVD-2026-98382 2026-10-02T17:29:32.254854+00:00 EUVD-2026-98382 https://cve.radiocsirt.org/vuln/fkie_cve-2014-2383 fkie_cve-2014-2383 2026-10-02T17:29:32.254889+00:00

dompdf.php in dompdf before 0.6.1, when DOMPDF_ENABLE_PHP is enabled, allows context-dependent attackers to bypass chroot protections and read arbitrary files via a PHP protocol and wrappers in the input_file parameter, as demonstrated by a php://filter/read=convert.base64-encode/resource in the input_file parameter.

 https://cve.radiocsirt.org/vuln/ghsa-qr6q-w4gj-3865 GHSA-qr6q-w4gj-3865 — DOMPDF Arbitrary File Read 2026-10-02T17:29:32.254932+00:00

Affected: Packagist: dompdf/dompdf

dompdf.php in dompdf before 0.6.1, when `DOMPDF_ENABLE_PHP` is enabled, allows context-dependent attackers to bypass chroot protections and read arbitrary files via a PHP protocol and wrappers in the input_file parameter, as demonstrated by a `php://filter/read=convert.base64-encode/resource` in the input_file parameter.

 https://cve.radiocsirt.org/vuln/gsd-2014-2383 gsd-2014-2383 2026-10-02T17:29:32.254971+00:00 gsd-2014-2383 https://cve.radiocsirt.org/vuln/ubuntu-cve-2014-2383 Withdrawn: UBUNTU-CVE-2014-2383 2026-10-02T17:29:32.254991+00:00

Withdrawn by the publisher.

Affected: Ubuntu:16.04:LTS: php-dompdf

dompdf.php in dompdf before 0.6.1, when DOMPDF_ENABLE_PHP is enabled, allows context-dependent attackers to bypass chroot protections and read arbitrary files via a PHP protocol and wrappers in the input_file parameter, as demonstrated by a php://filter/read=convert.base64-encode/resource in the input_file parameter.