Remote Code Execution (RCE)

dawnsparks-node-tesseract and node-tesseract are vulnerable to Remote Code Execution RCE. Use of the exec method in tesseract.js without sanitization allows an attacker to upload and execute malicious code on the system via the image filename...

GHSA-W868-4576-RV24 ntesseract vulnerable to Command Injection

The package ntesseract before 0.2.9 is vulnerable to Command Injection via lib/tesseract.js...

ntesseract vulnerable to Command Injection

The package ntesseract before 0.2.9 is vulnerable to Command Injection via lib/tesseract.js...

CVE-2020-28446

The package ntesseract before 0.2.9 are vulnerable to Command Injection via lib/tesseract.js...

CVE-2020-28446

The package ntesseract before 0.2.9 are vulnerable to Command Injection via lib/tesseract.js...

Command injection

The package ntesseract before 0.2.9 are vulnerable to Command Injection via lib/tesseract.js...

CVE-2020-28446 Command Injection

The package ntesseract before 0.2.9 are vulnerable to Command Injection via lib/tesseract.js...

tesseract 命令注入漏洞

tesseract is an open source OCR Optical Character Recognition engine. A security vulnerability exists in tesseract, which stems from a command injection attack injection point in the tesseract.js file...

Insecure Default Configuration in tesseract.js

Versions of tesseract.js prior to 1.0.19 default to using a third-party proxy. Requests may be proxied through crossorigin.me which clearly states is not suitable for production use. This may lead to instability and privacy violations. Recommendation Upgrade to version 1.0.19 or later...

GHSA-83RX-C8CR-6J8Q Insecure Default Configuration in tesseract.js

Versions of tesseract.js prior to 1.0.19 default to using a third-party proxy. Requests may be proxied through crossorigin.me which clearly states is not suitable for production use. This may lead to instability and privacy violations. Recommendation Upgrade to version 1.0.19 or later...

Insecure Default Configuration

tesseract.js is vulnerable to insecure default configuration attacks. The vulnerability exists through the default use of the crossorigin.me proxy which allows the potentially unsafe proxy to obtain sensitive data...

Insecure Default Configuration

Overview Versions of tesseract.js prior to 1.0.19 default to using a third-party proxy. Requests may be proxied through crossorigin.me which clearly states is not suitable for production use. This may lead to instability and privacy violations. Recommendation Upgrade to version 1.0.19 or later...