CVE-2026-19279 MIMICLab mcp-pdf-vision index.ts load_pdf command injection

A vulnerability was identified in MIMICLab mcp-pdf-vision 1.1.0. The impacted element is the function loadpdf of the file src/index.ts. Such manipulation of the argument pdfPath/sessionId leads to command injection. The attack can only be performed from a local environment. The project was inform...

PT-2026-69194

Name of the Vulnerable Software and Affected Versions MIMICLab mcp-pdf-vision version 1.1.0 Description Command injection is possible through the manipulation of the pdfPath or sessionId arguments within the load pdf function located in the src/index.ts file. This issue allows an attacker to...

Malware in dow-load-pdf-the-daily-stoic-366-meditations-on-wisdom-perseverance-and-the-art-of-living-

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

PT-2022-36865

Name of the Vulnerable Software and Affected Versions vips affected versions not specified Description The issue is related to a heap-buffer-overflow read, which occurs in the vips rect intersectrect function, specifically when calling vips foreign load pdf generate and vips region prepare to...