StackRadarChart IndexLive demo

CVE-2022-41343

High

Advisory

Published 26 Sept 2022In the index since 6 Sept 2026

Severity: High; worst across findings
CVSS: 7.5; base score, highest
EPSS: 0.047; 91st percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 11; of 17,781 indexed, latest versions
Container images: 11; deployed by those charts
Fix available: 1 of 1; affected package

Dompdf allows remote file inclusion because URI validation failure does not halt font registration

Carried by container images the latest versions of 11 of 17,781 indexed charts deploy, on 11 images.

Affected package	Affected versions	Fixed in	Images
dompdf/dompdfcomposer	v0.8.6, v1.0.2, v1.1.1, v1.2.1+1 more	2.0.1	11

OSV records: GHSA-6x28-7h8c-chx4

Charts affected

11 by stars

Chart

Latest

Affected images

Radar Score

1 of 2 See more

snipeit t3n 3.4.1

1 of the 2 container images this version deploys carry CVE-2022-41343.

Container image	Digest	Package	Fixed in
snipe/snipe-it :v6.0.14	55fb7636a98c	dompdf/dompdf@v2.0.0	2.0.1

Open the chart page →

18,509

monicageek-cookbook

1 of 1 See more

monica geek-cookbook 8.2.0

1 of the 1 container images this version deploys carry CVE-2022-41343.

Container image	Digest	Package	Fixed in
library/monica :3.7.0-apache	ceb1ba4196ab	dompdf/dompdf@v1.1.1	2.0.1

Open the chart page →

2,096

waardepapierenwaardepapieren

1 of 3 See more

waardepapieren waardepapieren 1.0.0

1 of the 3 container images this version deploys carry CVE-2022-41343.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/waardepapieren-php :latest	b2666ffcbad8	dompdf/dompdf@v0.8.6	2.0.1

Open the chart page →

8,079

waardepapieren-baliewaardepapieren-balie

1 of 3 See more

waardepapieren-balie waardepapieren-balie 1.0.0

1 of the 3 container images this version deploys carry CVE-2022-41343.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/waardepapieren-balie-php :latest	f36c423cd259	dompdf/dompdf@v0.8.6	2.0.1

Open the chart page →

7,871

conduction-uiconduction-ui

1 of 6 See more

conduction-ui conduction-ui 0.1.0

1 of the 6 container images this version deploys carry CVE-2022-41343.

Container image	Digest	Package	Fixed in
conduction/conduction-ui-php :dev	2744565516e8	dompdf/dompdf@v0.8.6	2.0.1

Open the chart page →

12,907

bookstackgeek-cookbook

1 of 1 See more

bookstack geek-cookbook 5.2.0

1 of the 1 container images this version deploys carry CVE-2022-41343.

Container image	Digest	Package	Fixed in
ghcr.io/linuxserver/bookstack :version-v21.12	f05447347ff1	dompdf/dompdf@v1.1.1	2.0.1

Open the chart page →

1,269

openemrgeek-cookbook

1 of 1 See more

openemr geek-cookbook 5.2.0

1 of the 1 container images this version deploys carry CVE-2022-41343.

Container image	Digest	Package	Fixed in
openemr/openemr :6.1.0	89eaa6d9a4e3	dompdf/dompdf@v1.1.1	2.0.1

Open the chart page →

8,392

panproto-application-nldesign

1 of 5 See more

pan proto-application-nldesign 0.1.0

1 of the 5 container images this version deploys carry CVE-2022-41343.

Container image	Digest	Package	Fixed in
conduction/pan-php :dev	24f03c57568f	dompdf/dompdf@v0.8.6	2.0.1

Open the chart page →

8,725

1 of 6 See more

shopware robjuz 2.0.0

1 of the 6 container images this version deploys carry CVE-2022-41343.

Container image	Digest	Package	Fixed in
shyim/shopware :6.4.6.0	a951c0e6b836	dompdf/dompdf@v1.0.2	2.0.1

Open the chart page →

2,972

bookstackschmitzis

1 of 1 See more

bookstack schmitzis 0.1.1

1 of the 1 container images this version deploys carry CVE-2022-41343.

Container image	Digest	Package	Fixed in
solidnerd/bookstack :21.12	762ffd5c51d3	dompdf/dompdf@v1.1.1	2.0.1

Open the chart page →

2,751

webresourcecataloguswebresourcecatalogus

1 of 4 See more

webresourcecatalogus webresourcecatalogus 1.1.0

1 of the 4 container images this version deploys carry CVE-2022-41343.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/webresourcecatalogus-php :latest	8f1bbd5cda85	dompdf/dompdf@v1.2.1	2.0.1

Open the chart page →

7,552

Container images carrying it

11 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
conduction/conduction-ui-php :dev	2744565516e8	dompdf/dompdf@v0.8.6	2.0.1	1
conduction/pan-php :dev	24f03c57568f	dompdf/dompdf@v0.8.6	2.0.1	1
library/monica :3.7.0-apache	ceb1ba4196ab	dompdf/dompdf@v1.1.1	2.0.1	1
openemr/openemr :6.1.0	89eaa6d9a4e3	dompdf/dompdf@v1.1.1	2.0.1	1
shyim/shopware :6.4.6.0	a951c0e6b836	dompdf/dompdf@v1.0.2	2.0.1	1
snipe/snipe-it :v6.0.14	55fb7636a98c	dompdf/dompdf@v2.0.0	2.0.1	1
solidnerd/bookstack :21.12	762ffd5c51d3	dompdf/dompdf@v1.1.1	2.0.1	1
ghcr.io/conductionnl/waardepapieren-balie-php :latest	f36c423cd259	dompdf/dompdf@v0.8.6	2.0.1	1
ghcr.io/conductionnl/waardepapieren-php :latest	b2666ffcbad8	dompdf/dompdf@v0.8.6	2.0.1	1
ghcr.io/conductionnl/webresourcecatalogus-php :latest	8f1bbd5cda85	dompdf/dompdf@v1.2.1	2.0.1	1
ghcr.io/linuxserver/bookstack :version-v21.12	f05447347ff1	dompdf/dompdf@v1.1.1	2.0.1	1