Lucene search
+L

8 matches found

Patchstack
Patchstack
•added 2026/05/07 3:38 p.m.•24 views

NPM: node-ts-ocr is vulnerable to OS Command Injection via the invokeImageOcr function in src/index.js

NPM: node-ts-ocr is vulnerable to OS Command Injection via the invokeImageOcr function in src/index.js vulnerability discovered by ? in WordPress Npm node-ts-ocr versions 1.0.15...

8.8CVSS5.8AI score0.01185EPSS
SaveExploits0References4Affected Software1
OSV
OSV
•added 2026/05/07 3:38 p.m.•17 views

GHSA-8JH2-3MW6-6PFM node-ts-ocr is vulnerable to OS Command Injection via the invokeImageOcr function in src/index.js

NPM package node-ts-ocr 1.0.15 is vulnerable to OS Command Injection via the invokeImageOcr function in src/index.js...

8.8CVSS5.8AI score0.01185EPSS
SaveExploits0References4
EUVD
EUVD
•added 2026/05/07 3:38 p.m.•26 views

EUVD-2025-209722

NPM package node-ts-ocr 1.0.15 is vulnerable to OS Command Injection via the invokeImageOcr function in src/index.js...

5.8AI score0.01185EPSS
SaveExploits0References3
NVD
NVD
•added 2026/05/07 3:16 p.m.•68 views

CVE-2025-63705

NPM package node-ts-ocr 1.0.15 is vulnerable to OS Command Injection via the invokeImageOcr function in src/index.js...

8.8CVSS0.01185EPSS
SaveExploits0References2
CVE
CVE
•added 2026/05/07 12:00 a.m.•31 views

CVE-2025-63705

The node-ts-ocr NPM package, version 1.0.15 , is vulnerable to OS Command Injection . The flaw exists within the invokeImageOcr function located in src/index.js, where insufficient input validation allows for the execution of arbitrary operating system commands. This tool is used for PDF and imag...

8.8CVSS5.9AI score0.01185EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/05/07 12:00 a.m.•2 views

CVE-2025-63705: Improper Neutralization of Special Elements used in an OS Command

NPM package node-ts-ocr 1.0.15 is vulnerable to OS Command Injection via the invokeImageOcr function in src/index.js...

8.8CVSS5.8AI score0.01185EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/05/07 12:00 a.m.•29 views

CVE-2025-63705

NPM package node-ts-ocr 1.0.15 is vulnerable to OS Command Injection via the invokeImageOcr function in src/index.js...

5.9AI score0.01185EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2026/05/07 12:00 a.m.•13 views

CVE-2025-63705

NPM package node-ts-ocr 1.0.15 is vulnerable to OS Command Injection via the invokeImageOcr function in src/index.js...

5.8AI score0.01185EPSS
SaveExploits0References3
Rows per page
Query Builder