https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 17:29:31 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-98382 EUVD-2026-98382 https://cve.radiocsirt.org/vuln/euvd-2026-98382 https://cve.radiocsirt.org/vuln/fkie_cve-2014-2383 <p>dompdf.php in dompdf before 0.6.1, when DOMPDF_ENABLE_PHP is enabled, allows context-dependent attackers to bypass chroot protections and read arbitrary files via a PHP protocol and wrappers in the input_file parameter, as demonstrated by a php://filter/read=convert.base64-encode/resource in the input_file parameter.</p> <p>dompdf.php in dompdf before 0.6.1, when DOMPDF_ENABLE_PHP is enabled, allows context-dependent attackers to bypass chroot protections and read arbitrary files via a PHP protocol and wrappers in the input_file parameter, as demonstrated by a php://filter/read=convert.base64-encode/resource in the input_file parameter.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2014-2383 https://cve.radiocsirt.org/vuln/ghsa-qr6q-w4gj-3865 <p><strong>Affected:</strong> Packagist: dompdf/dompdf</p> <p>dompdf.php in dompdf before 0.6.1, when `DOMPDF_ENABLE_PHP` is enabled, allows context-dependent attackers to bypass chroot protections and read arbitrary files via a PHP protocol and wrappers in the input_file parameter, as demonstrated by a `php://filter/read=convert.base64-encode/resource` in the input_file parameter.</p> <p><strong>Affected:</strong> Packagist: dompdf/dompdf</p> <p>dompdf.php in dompdf before 0.6.1, when `DOMPDF_ENABLE_PHP` is enabled, allows context-dependent attackers to bypass chroot protections and read arbitrary files via a PHP protocol and wrappers in the input_file parameter, as demonstrated by a `php://filter/read=convert.base64-encode/resource` in the input_file parameter.</p> https://cve.radiocsirt.org/vuln/ghsa-qr6q-w4gj-3865 https://cve.radiocsirt.org/vuln/gsd-2014-2383 gsd-2014-2383 https://cve.radiocsirt.org/vuln/gsd-2014-2383 https://cve.radiocsirt.org/vuln/ubuntu-cve-2014-2383 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: php-dompdf</p> <p>dompdf.php in dompdf before 0.6.1, when DOMPDF_ENABLE_PHP is enabled, allows context-dependent attackers to bypass chroot protections and read arbitrary files via a PHP protocol and wrappers in the input_file parameter, as demonstrated by a php://filter/read=convert.base64-encode/resource in the input_file parameter.</p> <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: php-dompdf</p> <p>dompdf.php in dompdf before 0.6.1, when DOMPDF_ENABLE_PHP is enabled, allows context-dependent attackers to bypass chroot protections and read arbitrary files via a PHP protocol and wrappers in the input_file parameter, as demonstrated by a php://filter/read=convert.base64-encode/resource in the input_file parameter.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2014-2383