[MEDIUM] Dompdf: Local file read due to improper file path validation in SVG images encoded as data-URI

PKSA-mwt3-h9tv-kx78 CVE-2026-56722 GHSA-cx96-42px-69fm

Affected package: dompdf/dompdf

Affected version: <3.1.6

Reported by:
GitHub