Command Injection

Overview npos-tesseract is an OCR tool for npos using tesseract engine Affected versions of this package are vulnerable to Command Injection. The injection point is located in line 55 in lib/ocr.js. PoC var a = require"npos-tesseract"; a.ocr"& touch JHU ","",function; Remediation There is no fixe...