Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

dompdf/php-svg-lib

              master @ 8259ffb
            

Fixes

CVEs

HIGH

Peak severity

Highlights

PHAR Deserialization: 1 prior fix. Scrutinize any change in this area.

src/Svg: most-fixed (1 issue). Treat as high-risk during review.

4 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

PHAR Deserialization: Insecure handling of the image href attribute allowed attackers to leverage the `phar://` stream wrapper to trigger PHAR deserialization and achieve Remote Code Execution (RCE).

Server-Side Request Forgery: The processing of the `font-family` attribute within inline styles failed to validate references, leaving a vector open for SSRF and bypasses of the `phar://` wrapper restriction.

Server-Side Request Forgery: The `<use>` element processing permitted merging of `href` and `xlink:href` attributes without proper sanitization, enabling local file inclusion and SSRF via nested SVG definitions.