pontedilana/php-weasyprint
Composer · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| PhpWeasyPrint vulnerable to SSRF and local file disclosure via the attachment option | pontedilana/php-weasyprint | Composer | Medium | Fix reported | |
| PhpWeasyPrint vulnerable to PHAR deserialization via output filename (CVE-2023-28115 case-insensitive bypass) | pontedilana/php-weasyprint | Composer | High | Fix reported | |
| php-weasyprint: shell command injection via configurable WeasyPrint binary path due to inverted is_executable() guard (mirror of KnpLabs/snappy GHSA-vpr4-p6fq-85jc) | pontedilana/php-weasyprint | Composer | High | Fix reported | |
| PhpWeasyPrint vulnerable to arbitrary file deletion at shutdown via public $temporaryFiles | pontedilana/php-weasyprint | Composer | Low | Fix reported |