---
id: 5087
title: "Blind trust: what is hidden behind the process of creating your PDF file?"
source_domain: swarm.ptsecurity.com
source_url: "https://swarm.ptsecurity.com/blind-trust-what-is-hidden-behind-the-process-of-creating-your-pdf-file/"
published_at: "2025-12-29T11:57:36Z"
tags: ["appsec", "vulnerability-research", "web-security", "deserialization", "ssrf", "pdf", "dompdf", "mpdf", "tcpdf"]
phying_url: "https://phying.com/item/5087"
lang: en
---

# Blind trust: what is hidden behind the process of creating your PDF file?

## Summary

PT SWARM analyzed seven HTML-to-PDF libraries including TCPDF, mPDF, dompdf and jsPDF, finding 13 vulnerabilities plus risky defaults enabling SSRF, data leaks and DoS, with threat model and PoCs.

## Intelligence Metadata

- **Sources:** swarm.ptsecurity.com
- **Published:** 2025-12-29T11:57:36Z
- **Original:** https://swarm.ptsecurity.com/blind-trust-what-is-hidden-behind-the-process-of-creating-your-pdf-file/
- **Phying News:** https://phying.com/item/5087