Threats tagged 'ghsa-mx3p-fhpw-x6rv'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	7.5	EPSS 1.3%	CVE-2024-22640tecnickcom/tcpdf · TCPDF vulnerable to Regular Expression Denial of Service High7.5EPSS 1.3%2024-04-19GCVE DatabaseCVE-2024-22640 TCPDF versions up to 6.7.4 are vulnerable to a Regular Expression Denial of Service (ReDoS) when parsing untrusted HTML containing a specially crafted color value. This vulnerability can cause the application to consume excessive CPU resources, potentially leading to denial of service conditions. The issue is fixed in version 6.7.5. EPSS 1.3%Report on CVE-2024-22640 Vulnerability CWE-1333 #ghsa-mx3p-fhpw-x6rv #packagist	GCVE Database	2024-04-19

Page 1 of 1