TI-2026-74140 CVE-2026-110646 · GHSA-j7cw-xwmc-w7qg
OS command injection in Beganovich snappdf on Windows via setUrl()
Priority MEDIUM 46
Beganovich snappdf from 1.1.0 before 6.1.0 contains an OS command injection vulnerability on Windows that allows attackers to run commands by influencing the rendered URL.