DOMPDF Information Disclosure

MEDIUM 6.5CVE-2014-5011 · GHSA-jwf8-mjj8-r8hq · Published 10/01/2020 · updated 17/06/2026

Package	Affected versions	Patched versions
dompdf/dompdf Packagist	`≥ 0.6, < 0.6.2`	`0.6.2`
dompdf dompdf_project	`< 0.6.2`	`0.6.2`

Description

DOMPDF before 0.6.2 allows Information Disclosure.

NVD description

DOMPDF before 0.6.2 allows Information Disclosure.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.