Composer tecnickcom/tcpdf has 8 known advisories in the phpwarden feed. Feed 2026.10.29.1, updated 2026-10-28.
| CVE | Title | Severity | CVSS | Affected | Fixed in |
|---|---|---|---|---|---|
| CVE-2018-17057 | TCPDF vulnerable to attackers triggering deserialization of arbitrary data | critical | 9.8 | <6.2.22 | 6.2.22 |
| CVE-2024-22640 | TCPDF vulnerable to Regular Expression Denial of Service | medium | 0.0 | <6.7.5 | 6.7.5 |
| CVE-2024-51058 | TCPDF Local File Inclusion vulnerability | medium | 6.2 | <6.7.6 | 6.7.6 |
| CVE-2024-56521 | TCPDF missing certificate validation | high | 0.0 | <6.8.0 | 6.8.0 |
| CVE-2024-56527 | TCPDF missing character escape on error messages | medium | 0.0 | <6.8.0 | 6.8.0 |
| CVE-2024-56519 | TCPDF lacks SVG sanitization | medium | 0.0 | <6.8.0 | 6.8.0 |
| CVE-2024-56522 | TCPDF has incorrect comparison | high | 7.5 | <6.8.0 | 6.8.0 |
| CVE-2024-32489 | TCPDF Cross-site Scripting vulnerability | medium | 6.1 | <6.7.4 | 6.7.4 |
Find out in one command. phpwarden checks your composer.lock against this advisory and 20,000+ others, ranked by real-world exploitation (CISA KEV + EPSS). Free, offline, open data.
# one-time install pip install phpwarden # then phpwarden deps composer.lock
Or keep it checked automatically: GitHub Action · pre-commit hook · GitLab CI · Laravel artisan command
Install docs How findings are ranked