CVE-2024-22640: Fedoraproject Fedora

High severity, CVSS 7.5. EPSS: 1.3% chance of exploitation in the next 30 days.

TCPDF version <=6.6.5 is vulnerable to ReDoS (Regular Expression Denial of Service) if parsing an untrusted HTML page with a crafted color.

Affected products

• Fedoraproject Fedora: version 40 only
• Tcpdf Project Tcpdf: up to and including 6.7.4

Published 2024-04-19. Last modified 2026-06-17.