PyPI/pdf2zh CVE-2025-50736: medium 6.1, EPSS 0.23%

Byaidu PDFMathTranslate vulnerable to open redirect

Action: No fix published. Pin and monitor.

Affected

No affected ranges in the source.

Fixed versions

No fixed version in the source.

Sources

• osv: PYSEC-2026-1760
• nvd: CVE-2025-50736
• https://github.com/Byaidu/PDFMathTranslate
• https://github.com/fai1424/Vulnerability-Research/tree/main/CVE-2025-50736
• https://hackmd.io/@fai1424/SJz7ttVWxe
• https://pdf2zh.com
• https://pypi.org/project/pdf2zh
• https://github.com/advisories/GHSA-pfrv-63w8-q7rq

CVE-2025-50736 · published 2026-07-07T16:03:09.189855Z · modified 2026-07-07T17:47:47.649161926Z · JSON