EUVD-2021-2230

Malware in sbrugna...

OS Command Injection in node-opencv

utils/find-opencv.js in node-opencv aka OpenCV bindings for Node.js prior to 6.1.0 is vulnerable to Command Injection. It does not validate user input allowing attackers to execute arbitrary commands...