8 matches found
CVE-2026-110638
doc-recog through 1.1.6 contains an OS command injection vulnerability that allows attackers to execute commands by supplying crafted document paths to recog or tag. Attackers can embed $... or backtick command substitution in the file path, which DocData.readPDF passes to a shell-based pdftotext...
CVE-2026-110638 doc-recog through 1.1.6 OS Command Injection via DocData._readPDF File Path
doc-recog through 1.1.6 contains an OS command injection vulnerability that allows attackers to execute commands by supplying crafted document paths to recog or tag. Attackers can embed $... or backtick command substitution in the file path, which DocData.readPDF passes to a shell-based pdftotext...
EUVD-2026-101266
doc-recog through 1.1.6 contains an OS command injection vulnerability that allows attackers to execute commands by supplying crafted document paths to recog or tag. Attackers can embed $... or backtick command substitution in the file path, which DocData.readPDF passes to a shell-based pdftotext...
CVE-2026-110638
The doc-recog library (through version 1.1.6 ) is vulnerable to an OS command injection vulnerability. The flaw exists because the DocData._readPDF function passes unvalidated document paths from the recog() or tag() functions to a shell-based pdftotext execution call. Attackers can exploit this ...
CVE-2026-110638
doc-recog through 1.1.6 contains an OS command injection vulnerability that allows attackers to execute commands by supplying crafted document paths to recog or tag. Attackers can embed $... or backtick command substitution in the file path, which DocData.readPDF passes to a shell-based pdftotext...
CVE-2026-110638 doc-recog through 1.1.6 OS Command Injection via DocData._readPDF File Path
doc-recog through 1.1.6 contains an OS command injection vulnerability that allows attackers to execute commands by supplying crafted document paths to recog or tag. Attackers can embed $... or backtick command substitution in the file path, which DocData.readPDF passes to a shell-based pdftotext...
PT-2026-114080
doc-recog through 1.1.6 contains an OS command injection vulnerability that allows attackers to execute commands by supplying crafted document paths to recog or tag. Attackers can embed $... or backtick command substitution in the file path, which DocData. readPDF passes to a shell-based pdftotex...
CVE-2026-110638: Improper Neutralization of Special Elements used in an OS Command
doc-recog through 1.1.6 contains an OS command injection vulnerability that allows attackers to execute commands by supplying crafted document paths to recog or tag. Attackers can embed $... or backtick command substitution in the file path, which DocData.readPDF passes to a shell-based pdftotext...