Security
Headlines
HeadlinesLatestCVEs

Headline

GHSA-qx95-cwh6-9mvq: TCPDF missing character escape on error messages

An issue was discovered in TCPDF before 6.8.0. The Error function lacks an htmlspecialchars call for the error message.

ghsa
#git#pdf

TCPDF missing character escape on error messages

Moderate severity GitHub Reviewed Published Dec 27, 2024 to the GitHub Advisory Database • Updated Dec 27, 2024

ghsa: Latest News

GHSA-3m86-c9x3-vwm9: Graylog vulnerable to privilege escalation through API tokens