GCVE - cpe:2.3:a:html2pdf_project:html2pdf:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:html2pdf_project:html2pdf:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Html2Pdf Project (`5de94167-5ca5-5458-8f39-ccf570f4d71f`)
Product	Html2Pdf (`80fdc0be-46ef-50e0-aa43-31e6425f9543`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from purl2cpe mapping

PURL	Source	Last updated
`pkg:bitbucket/eloomi/html2pdf`	purl2cpe	2026-06-01 10:16:58.071218
`pkg:github/spipu/html2pdf`	purl2cpe	2026-06-01 10:16:58.071221
`pkg:sourceforge/phphtml2pdf`	purl2cpe	2026-06-01 10:16:58.071224

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2023-39062`	vulnerable	2026-06-08 06:09:35.728926	Details available Cross Site Scripting vulnerability in Spipu HTML2PDF before v.5.2.8 allows a remote attacker to execute arbitrary code via a crafted script to the forms.php. Published: 2023-08-28T00:00:00.000Z Updated: 2024-10-02T16:27:35.775Z Open on db.gcve.eu Reference links https://github.com/spipu/html2pdf/blob/92afd81823d62ad95eb9d034858311bb63aeb4ac/CHANGELOG.md https://github.com/afine-com/CVE-2023-39062 https://github.com/sectroyer/CVEs/tree/main/CVE-2023-39062	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-45394`	vulnerable	2026-06-08 05:36:48.091510	Details available An issue was discovered in Spipu HTML2PDF before 5.2.4. Attackers can trigger deserialization of arbitrary data via the injection of a malicious <link> tag in the converted HTML document. Published: 2022-01-18T11:15:45.000Z Updated: 2024-08-04T04:39:20.565Z Open on db.gcve.eu Reference links https://github.com/spipu/html2pdf https://www.synacktiv.com/sites/default/files/2022-01/html2pdf_ssrf_deserialization.pdf https://github.com/spipu/html2pdf/blob/master/CHANGELOG.md	Imported from gcve-enriched-dumps CVE data

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.