Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
dompdf library can let attackers execute code
published 2 months ago
Summary
The dompdf PDF generation library had six security flaws that could let a malicious user run unwanted code on your server. The issues have been fixed in the updated version 0.8.6-p2+tuxcare. Upgrade to this version as soon as possible to protect your system.
What to do
- Update dompdf dompdf/dompdf to version 0.8.6-p2+tuxcare.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| TuxCare:Packagist | dompdf | dompdf/dompdf |
>= 0.8.6, < 0.8.6-p2+tuxcare Fix: upgrade to 0.8.6-p2+tuxcare
|
Original advisory text
TuxCare security update for dompdf/dompdf (6 CVEs)
TuxCare rebuilt dompdf/dompdf to address 6 CVEs. Fixed in 0.8.6-p2+tuxcare.
Timeline
Published27 Aug 2026
Updated15 Oct 2026
First seen15 Oct 2026
Sources
CLSA-2026-1787828763 · OSV
Track software like this
Free during beta