https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T19:37:01.336907+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-15683 EUVD-2026-15683 2026-10-02T19:37:01.339761+00:00 EUVD-2026-15683 https://cve.radiocsirt.org/vuln/fkie_cve-2022-28368 fkie_cve-2022-28368 2026-10-02T19:37:01.339792+00:00

Dompdf 1.2.1 allows remote code execution via a .php file in the src:url field of an @font-face Cascading Style Sheets (CSS) statement (within an HTML input file).

 https://cve.radiocsirt.org/vuln/ghsa-x752-qjv4-c4hc GHSA-x752-qjv4-c4hc — Remote code injection in dompdf/dompdf 2026-10-02T19:37:01.339821+00:00

Affected: Packagist: dompdf/dompdf

Dompdf is an HTML to PDF converter. Dompdf before 1.2.1 allows remote code execution via a .php file in the src:url field of an @font-face Cascading Style Sheets (CSS) statement (within an HTML input file).

 https://cve.radiocsirt.org/vuln/gsd-2022-28368 gsd-2022-28368 2026-10-02T19:37:01.339845+00:00 gsd-2022-28368