Approved changes feed: RSS · Atom
cpe:2.3:a:tcpdf_project:tcpdf:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Tcpdf Project (e22f59b4-7904-56ed-b6cc-a4fef51276fe) |
|---|---|
| Product | Tcpdf (c67f6b66-4526-52a1-8d5d-771f47a013d5) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from purl2cpe mapping
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:bitbucket/eloomi/tcpdf |
purl2cpe | 2026-06-01 10:12:43.783663 |
pkg:deb/debian/tcpdf |
purl2cpe | 2026-06-01 10:12:43.783665 |
pkg:deb/ubuntu/tcpdf |
purl2cpe | 2026-06-01 10:12:43.783668 |
pkg:github/tecnickcom/tcpdf |
purl2cpe | 2026-06-01 10:12:43.783671 |
pkg:rpm/fedora/php-tcpdf |
purl2cpe | 2026-06-01 10:12:43.783673 |
pkg:sourceforge/tcpdf |
purl2cpe | 2026-06-01 10:12:43.783676 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-56527 |
vulnerable | 2026-06-08 06:56:12.756851 |
Details available
An issue was discovered in TCPDF before 6.8.0. The Error function lacks an htmlspecialchars call for the error message.
Published: 2024-12-27T00:00:00.000Z
Updated: 2025-11-03T19:32:22.949Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-56522 |
vulnerable | 2026-06-08 06:56:12.744551 |
Details available
An issue was discovered in TCPDF before 6.8.0. unserializeTCPDFtag uses != (aka loose comparison) and does not use a constant-time function to compare TCPDF tag hashes.
Published: 2024-12-27T00:00:00.000Z
Updated: 2025-11-03T19:32:21.561Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-56521 |
vulnerable | 2026-06-08 06:56:12.743931 |
Details available
An issue was discovered in TCPDF before 6.8.0. If libcurl is used, CURLOPT_SSL_VERIFYHOST and CURLOPT_SSL_VERIFYPEER are set unsafely.
Published: 2024-12-27T00:00:00.000Z
Updated: 2025-03-24T17:45:16.482Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-56519 |
vulnerable | 2026-06-08 06:56:12.742849 |
Details available
An issue was discovered in TCPDF before 6.8.0. setSVGStyles does not sanitize the SVG font-family attribute.
Published: 2024-12-27T00:00:00.000Z
Updated: 2025-11-03T19:32:18.795Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-51058 |
vulnerable | 2026-06-08 06:52:11.657367 |
Details available
Local File Inclusion (LFI) vulnerability has been discovered in TCPDF 6.7.5. This vulnerability enables a user to read arbitrary files from the server's file system through <img> src tag, potentially exposing sensitive information.
Published: 2024-11-26T00:00:00.000Z
Updated: 2025-11-03T19:31:56.630Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-32489 |
vulnerable | 2026-06-08 06:35:33.216379 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-22641 |
vulnerable | 2026-06-08 06:29:35.960973 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-22640 |
vulnerable | 2026-06-08 06:29:35.960161 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-6100 |
vulnerable | 2026-06-08 05:09:50.517189 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.