fpdf2 vulnerabilities
CVEs whose affected-version data names the fpdf2 package (pip). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-114610Medium· 6.5fpdf2: Exponential SVG '<use>' expansion causes CPU and memory exhaustion in 'FPDF.image()'
fpdf2: Exponential SVG '<use>' expansion causes CPU and memory exhaustion in 'FPDF.image()'
▾ Sunlitfpdf2 · fpdf2EPSS 0.30%via OSV
CVE-2026-114609Medium· 5.8fpdf2 implicitly loads external URLs and local image paths when rendering attacker-controlled content
fpdf2 implicitly loads external URLs and local image paths when rendering attacker-controlled content
▾ Sunlitfpdf2 · fpdf2EPSS 0.25%via OSV