https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 08 Oct 2026 19:31:18 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-60478 EUVD-2026-60478 https://cve.radiocsirt.org/vuln/euvd-2026-60478 https://cve.radiocsirt.org/vuln/fkie_cve-2019-1000005 <p>mPDF version 7.1.7 and earlier contains a CWE-502: Deserialization of Untrusted Data vulnerability in getImage() method of Image/ImageProcessor class that can result in Arbitry code execution, file write, etc.. This attack appears to be exploitable via attacker must host crafted image on victim server and trigger generation of pdf file with content &lt;img src=&#34;phar://path/to/crafted/image&#34;&gt;. This vulnerability appears to have been fixed in 7.1.8.</p> <p>mPDF version 7.1.7 and earlier contains a CWE-502: Deserialization of Untrusted Data vulnerability in getImage() method of Image/ImageProcessor class that can result in Arbitry code execution, file write, etc.. This attack appears to be exploitable via attacker must host crafted image on victim server and trigger generation of pdf file with content &lt;img src=&#34;phar://path/to/crafted/image&#34;&gt;. This vulnerability appears to have been fixed in 7.1.8.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2019-1000005 https://cve.radiocsirt.org/vuln/ghsa-3cwc-m7c2-qr86 <p><strong>Affected:</strong> Packagist: mpdf/mpdf</p> <p>mPDF version 7.1.7 and earlier contains a CWE-502: Deserialization of Untrusted Data vulnerability in getImage() method of Image/ImageProcessor class that can result in Arbitry code execution, file write, etc.. This attack appears to be exploitable via attacker must host crafted image on victim server and trigger generation of pdf file with content `&lt;img src=&#34;phar://path/to/crafted/image&#34;&gt;`. This vulnerability appears to have been fixed in 7.1.8.</p> <p><strong>Affected:</strong> Packagist: mpdf/mpdf</p> <p>mPDF version 7.1.7 and earlier contains a CWE-502: Deserialization of Untrusted Data vulnerability in getImage() method of Image/ImageProcessor class that can result in Arbitry code execution, file write, etc.. This attack appears to be exploitable via attacker must host crafted image on victim server and trigger generation of pdf file with content `&lt;img src=&#34;phar://path/to/crafted/image&#34;&gt;`. This vulnerability appears to have been fixed in 7.1.8.</p> https://cve.radiocsirt.org/vuln/ghsa-3cwc-m7c2-qr86 https://cve.radiocsirt.org/vuln/gsd-2019-1000005 gsd-2019-1000005 https://cve.radiocsirt.org/vuln/gsd-2019-1000005