Skip to content

chore(deps): update dependency dompdf/dompdf to v3.1.6 - #3

Open
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/dompdf-dompdf-3.x-lockfile
Open

renovate[bot] wants to merge 1 commit into
mainfrom
renovate/dompdf-dompdf-3.x-lockfile

Conversation

@renovate

@renovate renovate Bot commented Aug 26, 2026

Copy link
Copy Markdown

This PR contains the following updates:

Package Change Age Adoption Passing Confidence
dompdf/dompdf 3.1.53.1.6 age adoption passing confidence

Release Notes

dompdf/dompdf (dompdf/dompdf)

v3.1.6: Dompdf 3.1.6

Compare Source

This release addresses the following announced vulnerabilities:

Vulnerability References Type Severity
Chroot Validation Bypass GHSA-wvh6-f5jh-8gw4 Validation Bypass Moderate
File existence oracle via font-face stylesheet declaration GHSA-7x2p-4jvh-6384 Information Disclosure Moderate
Local file read due to improper file path validation in SVG images encoded as data-URI GHSA-cx96-42px-69fm Information Disclosure Moderate
Embedded SVG images can leak existence of files and directories within the filesystem GHSA-j8qw-6jw8-r297 Information Disclosure Moderate
Denial of Service via Resource Exhaustion using Oversized Image Bitmaps GHSA-f5gf-2cj8-52g2 Denial of Service Moderate
Uncontrolled resource consumption based on declared BMP dimensions GHSA-8hg6-c449-896m Denial of Service Moderate

Review the Securing Dompdf wiki document for guidance on steps you can take to mitigate your installation against potential exploit.

Full Changelog: dompdf/dompdf@v3.1.5...v3.1.6


Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants