TI-2026-70552 CVE-2026-108554 · GHSA-685q-m24h-8x9gServer-side request forgery in PDFMathTranslate Link inputPriority HIGH 70PDFMathTranslate (pdf2zh) through 1.9.11 contains a server-side request forgery vulnerability that allows unauthenticated attackers to make the server fetch arbitrary URLs via the Link input.CVSS 4.0MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.00301 · Published 2026-10-10 · No fix listed CWE-918