~ / search / GHSA-g9wg-98c2-qv3v

GHSA-g9wg-98c2-qv3v

TCPDF Cross-site Scripting vulnerability

Source: GitHub Advisory Database (reviewed) Moderate CVE-2024-32489

Packages

EcosystemPackageAffectedFixed in
Packagist tecnickcom/tcpdf < 6.7.4 6.7.4

Details

As written in the advisory (Markdown source, shown as plain text).

TCPDF before 6.7.4 mishandles calls that use HTML syntax.

References

External links from the advisory. They lead to third-party sites.