Skip to content
CVE PROGRAM SOURCE RECORD5.3 Medium

CVE-2026-19752

EnzoVezzaro mcp-dominican-layer PDF Parsing index.ts parse-pdf server-side request forgery

Description

A vulnerability was found in EnzoVezzaro mcp-dominican-layer up to 39dd373786712650097ad31db27d5c477c8f9c82. This affects the function parse-pdf of the file src/index.ts of the component PDF Parsing. Performing a manipulation of the argument pdfUrl results in server-side request forgery. It is possible to initiate the attack remotely. The exploit has been made public and could be used. The project was informed of the problem early through an issue report but has not responded yet.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

EnzoVezzaro mcp-dominican-layer

  • 39dd373786712650097ad31db27d5c477c8f9c82affected

References