[LOW] Dompdf: File existence oracle via font-face stylesheet declaration

PKSA-hp6n-n4kz-21wk CVE-2026-55555 GHSA-7x2p-4jvh-6384

Affected package: dompdf/dompdf

Affected version: <3.1.6

Reported by:
GitHub