CVE-2022-2400: Dompdf Project Dompdf

Medium severity, CVSS 5.3. EPSS: 1.2% chance of exploitation in the next 30 days.

External Control of File Name or Path in GitHub repository dompdf/dompdf prior to 2.0.0.

Affected products

• Dompdf Project Dompdf: before 2.0.0 (fixed in 2.0.0)

Published 2022-07-18. Last modified 2026-06-17.