CVE catalog

CVE-2022-2400

php-dompdf: CVE-2022-2400

[CVE catalog]

Severity
Medium
Source
[NVD] · [CVE record]
EPSS
1.21% · Oct 25, 2026

External Control of File Name or Path in GitHub repository dompdf/dompdf prior to 2.0.0.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianphp-dompdfsid3.1.4+dfsg-2fixed
Debianphp-dompdfbookworm2.0.3+dfsg-1+deb12u1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianphp-dompdfsourcesid2.0.2+dfsg-1not yet assignedNot reported[1015874]
Debianphp-dompdfsourcebookworm2.0.2+dfsg-1not yet assignedNot reported[1015874]

[Debian bug #1015874]

OpenFactory catalog packages

[Debian 12 (Bookworm)]

  • [php-dompdf]Fixed
    Details (2)

    • 2.0.3+dfsg-1+deb12u1 · all · bookworm

      Fixed · Fixed: 2.0.2+dfsg-1

      dsa · php-dompdf · debian · bookworm

    • 2.0.3+dfsg-1+deb12u1 · all · bookworm

      Fixed · Fixed: 2.0.2+dfsg-1

      dsa · php-dompdf · debian · bookworm

Observed:

References

[Debian Security Tracker] · [FIRST EPSS]