https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T06:12:48.719478+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-12342 EUVD-2026-12342 2026-10-03T06:12:48.834152+00:00 EUVD-2026-12342 https://cve.radiocsirt.org/vuln/fkie_cve-2022-2400 fkie_cve-2022-2400 2026-10-03T06:12:48.834190+00:00

External Control of File Name or Path in GitHub repository dompdf/dompdf prior to 2.0.0.

 https://cve.radiocsirt.org/vuln/ghsa-5qj8-6xxj-hp9h GHSA-5qj8-6xxj-hp9h — Dompdf before v2.0.0 vulnerable to chroot check bypass 2026-10-03T06:12:48.834222+00:00

Affected: Packagist: dompdf/dompdf

Dompdf prior to version 2.0.0 is vulnerable to a chroot check bypass, which could cause disclosure of png and jpeg files.

 https://cve.radiocsirt.org/vuln/gsd-2022-2400 gsd-2022-2400 2026-10-03T06:12:48.834246+00:00 gsd-2022-2400 https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-2400 UBUNTU-CVE-2022-2400 2026-10-03T06:12:48.834260+00:00

Affected: Ubuntu:Pro:16.04:LTS: php-dompdf, Ubuntu:Pro:16.04:LTS: civicrm, Ubuntu:16.04:LTS: icingaweb2, Ubuntu:Pro:18.04:LTS: civicrm, Ubuntu:18.04:LTS: icingaweb2, Ubuntu:Pro:18.04:LTS: php-dompdf, Ubuntu:20.04:LTS: php-dompdf, Ubuntu:Pro:20.04:LTS: civicrm, Ubuntu:20.04:LTS: icingaweb2, Ubuntu:22.04:LTS: icingaweb2 and 5 more

External Control of File Name or Path in GitHub repository dompdf/dompdf prior to 2.0.0.