Is fooman/tcpdf safe to use?

fooman/tcpdf has 1 known vulnerabilities on the latest version (6.11.2-p1). DepScope rates its health at 57/100 (high risk).

What is the latest version of fooman/tcpdf?

The latest version of fooman/tcpdf is 6.11.2-p1, released 2026-04-01.

Does fooman/tcpdf have known vulnerabilities?

Yes. fooman/tcpdf has 1 known vulnerabilities. See depscope.dev/pkg/composer/fooman/tcpdf for details.

Is fooman/tcpdf deprecated?

No, fooman/tcpdf is actively maintained. Latest release: 6.11.2-p1 (2026-04-01).

What are alternatives to fooman/tcpdf?

DepScope has no curated alternatives for fooman/tcpdf at this time.

What license does fooman/tcpdf use?

fooman/tcpdf is licensed under LGPL-3.0-or-later.

fooman/tcpdf

composerv6.11.2-p1

Trimmed down version of TCPDF (no tools and minimal fonts). TCPDF is a PHP class for generating PDF documents and barcodes.

License LGPL-3.0-or-later132 versions1 maintainers3 deps

fooman/TCPDF

/ 100

Health

do not use

fooman/tcpdf has critical vulnerabilities — do not use

Update to >= 6.2.22 to fix known vulnerabilities

1 critical vulnerabilities

Health breakdown0 – 100

25/25

maintenance

0/20

popularity

15/25

security

15/15

maturity

2/15

community

Vulnerabilities

1 critical

Advisories (1)

Severity	ID	Summary	Fixed in
critical	CVE-2018-17057	TCPDF vulnerable to attackers triggering deserialization of arbitrary data	6.2.22

Threat intelligence

1 likely exploited (EPSS ≥ 0.5)

Threat tier per vulnerability derived from CISA KEV catalog + FIRST.org EPSS scores.

Maintainer trust

Active maintainers (3m)

1

Contributors (12m)

0

Primary author dominance

0%

GitHub stars

1

single active maintainer 3m

Health History

Dependency Tree

License Audit

Dependencies (3)

php ext-bcmath ext-curl

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/composer/fooman/tcpdf

Last updated · 2026-04-01T07:58:50+00:00