[MEDIUM] Dompdf: Uncontrolled resource consumption based on declared BMP dimensions

PKSA-gh7h-hhy4-byg7 CVE-2026-59941 GHSA-8hg6-c449-896m

Affected package: dompdf/dompdf

Affected version: <3.1.6

Reported by:
GitHub