high7.5
CVE-2024-22641
TCPDF version 6.6.5 and before is vulnerable to ReDoS (Regular Expression Denial of Service) if parsing an untrusted SVG file.
Impact
TCPDF version 6.6.5 and before is vulnerable to ReDoS (Regular Expression Denial of Service) if parsing an untrusted SVG file.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Tcpdf Project | Tcpdf | through 6.7.4 |