TCPDF library versions 5.9 and below suffer from an arbitrary file deletion vulnerability via object injection. Continue reading...