Dompdf

Every one of the 15 is a mark on the map. Named now: 1 to 15, most at risk first.

1. Dompdf < v0.6.0 - Local File InclusionCVE-2014-2383Dompdf · 39% likely

   CWE-200

2. Dompdf 1.2.1 allows remote code execution via a .php file in the src:url field of an @font-face Cascading Style Sheets (CSS) statement (within an HTML input file).CVE-2022-28368Dompdf Project · 84% likely

   CWE-79

3. registerFont in FontMetrics.php in Dompdf before 2.0.1 allows remote file inclusion because a URI validation failure does not halt font registration, as demonstrated by a @font-fa…CVE-2022-41343Dompdf Project · CVSS 7.5 · 6.0% likely

   CWE-552

4. DOMPDF before 0.6.2 allows remote code execution, a related issue to CVE-2014-2383.CVE-2014-5013Dompdf Project · 4.5% likely
5. URI validation failure on SVG parsing in DompdfCVE-2023-23924dompdf · CVSS 10 · 3.7% likely

   CWE-551

6. URI validation failure on SVG parsing. Bypass of CVE-2023-23924CVE-2023-24813dompdf · CVSS 10 · 2.5% likely

   CWE-436

7. DOMPDF before 0.6.2 allows Information Disclosure.CVE-2014-5011Dompdf Project · 1.5% likely

   CWE-200

8. Dompdf possible DoS caused by infinite recursion when parsing SVG imagesCVE-2023-50262dompdf · CVSS 5.3 · 1.5% likely

   CWE-674

9. DOMPDF before 0.6.2 allows denial of service.CVE-2014-5012Dompdf Project · 1.2% likely
10. Dompdf: Denial of Service (DoS) via Resource Exhaustion using Oversized Image BitmapsCVE-2026-59942dompdf · CVSS 6.3 · 0.9% likely

    CWE-400

11. Dompdf: Uncontrolled resource consumption based on declared BMP dimensionsCVE-2026-59941dompdf · CVSS 6.3 · 0.6% likely

    CWE-400

12. Dompdf: File existence oracle via font-face stylesheet declarationCVE-2026-55555dompdf · CVSS 2.3 · 0.5% likely

    CWE-203

13. Dompdf: Chroot Validation BypassCVE-2026-55554dompdf · CVSS 2.3 · 0.5% likely

    CWE-20

14. Dompdf: Local file read due to improper file path validation in SVG images encoded as data-URICVE-2026-56722dompdf · CVSS 6.3 · 0.4% likely

    CWE-20

15. Dompdf: Embedded SVG images can leak existence of files and directories within the filesystemCVE-2026-59943dompdf · CVSS 6.3 · 0.4% likely

    CWE-209

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.