Vulnerability in TCPDF

[012git012]

Hello @nicolaasuni,

We are forced to open the public issue on this matter again (our previous request - #829), as we have not yet received a final resolution from your side.

Please check your email — we have already provided possible approaches to remediate and mitigate the vulnerability. Our research team is waiting for your decision.

We kindly ask you to provide your final response at the earliest convenience.

Thank you in advance.

[williamdes]

@nicolaasuni said

I believe the vulnerability is invalid or out-of scope.

I say, publish a public POC ?

[012git012]

@williamdes
Yes, our team plans to publish PoC, but we would also like to receive a final response from the library's author after providing additional information on this vulnerability.
The research is scheduled to be published next week.