{"schema":"vulnpedia.research/1","cve":"CVE-2026-110638","generated":"2026-10-26T13:52:32.101Z","references":[{"url":"https://github.com/zepspaiva/doc-recog/pull/2","tags":["issue-tracking","patch"],"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-14T14:17:09.820Z","origins":[{"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-14T14:17:09.820Z","url":"https://github.com/zepspaiva/doc-recog/pull/2"},{"source":"nvd","sourceId":"CVE-2026-110638","modified":"2026-10-16T19:03:18.127","url":"https://github.com/zepspaiva/doc-recog/pull/2"}]},{"url":"https://github.com/zepspaiva/doc-recog/blob/96d31957fbc2a31f1d739e2d64e5c85a05f688ec/docdata.js#L69-L74","tags":["technical-description"],"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-14T14:17:09.820Z","origins":[{"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-14T14:17:09.820Z","url":"https://github.com/zepspaiva/doc-recog/blob/96d31957fbc2a31f1d739e2d64e5c85a05f688ec/docdata.js#L69-L74"},{"source":"nvd","sourceId":"CVE-2026-110638","modified":"2026-10-16T19:03:18.127","url":"https://github.com/zepspaiva/doc-recog/blob/96d31957fbc2a31f1d739e2d64e5c85a05f688ec/docdata.js#L69-L74"}]},{"url":"https://github.com/zepspaiva/doc-recog","tags":["product"],"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-14T14:17:09.820Z","origins":[{"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-14T14:17:09.820Z","url":"https://github.com/zepspaiva/doc-recog"},{"source":"nvd","sourceId":"CVE-2026-110638","modified":"2026-10-16T19:03:18.127","url":"https://github.com/zepspaiva/doc-recog"}]},{"url":"https://www.vulncheck.com/advisories/doc-recog-through-1.1.6-os-command-injection-via-docdata-readpdf-file-path","tags":["third-party-advisory"],"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-14T14:17:09.820Z","origins":[{"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-14T14:17:09.820Z","url":"https://www.vulncheck.com/advisories/doc-recog-through-1.1.6-os-command-injection-via-docdata-readpdf-file-path"},{"source":"nvd","sourceId":"CVE-2026-110638","modified":"2026-10-16T19:03:18.127","url":"https://www.vulncheck.com/advisories/doc-recog-through-1.1.6-os-command-injection-via-docdata-readpdf-file-path"}]},{"source":"euvd","sourceId":"EUVD-2026-101266","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-101266","tags":["ADVISORY"],"origins":[{"source":"euvd","sourceId":"EUVD-2026-101266","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-101266"}]}],"packages":[],"pocCandidates":[],"cataloguedPoc":[],"vendorStatements":[]}