CVE-2026-19752

Name of the Vulnerable Software and Affected Versions EnzoVezzaro mcp-dominican-layer versions up to 39dd373786712650097ad31db27d5c477c8f9c82

Description An issue exists in the PDF Parsing component within the parse-pdf() function of the src/index.ts file. A remote attacker can manipulate the pdfUrl argument to cause server-side request forgery (SSRF), a condition where the server is coerced into making unauthorized requests to an arbitrary destination.

Recommendations As a temporary workaround, restrict the use of the pdfUrl argument in the parse-pdf() function until a fix is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.