CVE-2021-45394

An issue was discovered in Spipu HTML2PDF before 5.2.4. Attackers can trigger deserialization of arbitrary data via the injection of a malicious tag in the converted HTML document.

Date published : 2022-01-18

https://github.com/spipu/html2pdf

https://github.com/spipu/html2pdf/blob/master/CHANGELOG.md