TI-2018-15993 CVE-2018-1000639 · GHSA-8hrg-9j2r-pwqrLatexDraw version <=4.0 contains a XML External Entity (XXE) vulnerability in SVG parsing…Priority MEDIUM 44LatexDraw version <=4.0 contains a XML External Entity (XXE) vulnerability in SVG parsing functionality that can result in disclosure of data, server side request forgery, port scanning, possible rce.CVSS 3.1CRITICAL 9.6· Network · No auth · User interaction · EPSS 0.01554 · Published 2018-08-20 · No fix listed CWE-611