Threats tagged 'ghsa-jgc6-5vgc-hvqg'

MIMICLab mcp-pdf-vision version 1.1.0 contains a command injection vulnerability in the load_pdf function located in src/index.ts. This vulnerability arises from unsafe manipulation of the pdfPath/sessionId argument. Exploitation requires local access to the environment. The issue was reported early to the project, but no response or fix has been provided yet.