Dompdf is an HTML to PDF converter for PHP. In versions 3.15 and prior, if a malicious actor can supply unrestricted content for rendering by Dompdf they can utilize the SVG rendering functionality to leak filesystem information when rendering PDF files using image references within a data-URI encoded SVG document. Using an <image> element inside a data-URI embedded SVG, an attacker can attempt to embed other files via the href or xlink:href attributes. When processing a file that does not exist (e.g. file:///DOESNOTEXIST), dompdf behaves differently than it does when accessing a file or directory that actually exists on the filesystem. This issue has been fixed in version 3.16.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Dompdf is an HTML to PDF converter for PHP. In versions 3.15 and prior, if a malicious actor can supply     unrestricted content for rendering by Dompdf they can utilize the SVG rendering functionality to leak     filesystem information when rendering PDF files using image references within a data-URI encoded SVG     document. Using an <image> element inside a data-URI embedded SVG, an attacker can attempt to embed other     files via the href or xlink:href attributes. When processing a file that does not exist (e.g.
    file:///DOESNOTEXIST), dompdf behaves differently than it does when accessing a file or directory that     actually exists on the filesystem. This issue has been fixed in version 3.16. (CVE-2026-59943)

Note that Nessus relies on the presence of the package as reported by the vendor.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - Dompdf is an HTML to PDF converter for PHP. In versions 3.15 and prior, if a malicious actor can supply
    unrestricted content for rendering by Dompdf they can utilize the SVG rendering functionality to leak
    filesystem information when rendering PDF files using image references within a data-URI encoded SVG
    document. Using an <image> element inside a data-URI embedded SVG, an attacker can attempt to embed other
    files via the href or xlink:href attributes. When processing a file that does not exist (e.g.
    file:///DOESNOTEXIST), dompdf behaves differently than it does when accessing a file or directory that
    actually exists on the filesystem. This issue has been fixed in version 3.16. (CVE-2026-59943)

ID	Name	Product	Family	Type	Severity
330629	Linux Distros Unpatched Vulnerability : CVE-2026-59943	Nessus	Misc.	Local	medium
445185	SCA: security update for dompdf/dompdf (GHSA-j8qw-6jw8-r297)	Tenable Cloud Security	SCA Checks	Local	medium
445185	SCA: security update for dompdf/dompdf (GHSA-j8qw-6jw8-r297)	Tenable Self-Hosted Container Security	SCA Checks	Local	medium

Detections

Analytics

CVE-2026-59943

medium

Tenable Plugins

medium

medium

medium