~ / search / GHSA-w868-4576-rv24

GHSA-w868-4576-rv24

ntesseract vulnerable to Command Injection

Source: GitHub Advisory Database (reviewed) Critical CVE-2020-28446

Packages

EcosystemPackageAffectedFixed in
npm ntesseract < 0.2.9 0.2.9

Details

As written in the advisory (Markdown source, shown as plain text).

The package ntesseract before 0.2.9 is vulnerable to Command Injection via lib/tesseract.js.

References

External links from the advisory. They lead to third-party sites.