Launchpad.net

CVE 2024-22640

TCPDF version <=6.6.5 is vulnerable to ReDoS (Regular Expression Denial of Service) if parsing an untrusted HTML page with a crafted color.

CVE-2024-22640 (Candidate) is related to these bugs:

Bug #2062983: 6.7.4+dfsg is vulnerable to CVE-2024-22640

Summary				In	Importance	Status
	2062983	6.7.4+dfsg is vulnerable to CVE-2024-22640		tcpdf (Ubuntu)	Undecided	Fix Released

See the

CVE page on Mitre.org for more details.