TCPDF missing certificate validation

CRÍTICO 9.8CVE-2024-56521 · GHSA-9mgx-552f-59p6 · Published 27/12/2024 · updated 17/06/2026

Em resumo

CVE-2024-56521 é uma vulnerabilidade CRÍTICO (CVSS 9.8) que afeta tecnickcom/tcpdf, tcpdf (tcpdf project).
Chance de exploração nos próximos 30 dias (EPSS): 0.78%, maior que 56.1% das vulnerabilidades.
Correção: atualize para 6.8.0 ou posterior.

Package	Affected versions	Patched versions
tecnickcom/tcpdf Packagist	`< 6.8.0`	`6.8.0`
tcpdf tcpdf_project	`< 6.8.0`	`6.8.0`

An issue was discovered in TCPDF before 6.8.0. If libcurl is used, CURLOPT_SSL_VERIFYHOST and CURLOPT_SSL_VERIFYPEER are set unsafely.

NVD description

An issue was discovered in TCPDF before 6.8.0. If libcurl is used, CURLOPT_SSL_VERIFYHOST and CURLOPT_SSL_VERIFYPEER are set unsafely.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Package

Affected versions

Patched versions

Packagist

< 6.8.0

6.8.0

< 6.8.0

6.8.0

Mais vulnerabilidades de tecnickcom/tcpdf

Ver tudo →