CVE-2019-10061

CVE-2019-10061 affects the Node.js OpenCV bindings (node-opencv). The vulnerable component is utils/find-opencv.js , with versions prior to 6.1.0 . Root cause: it does not validate user input, enabling attackers to execute arbitrary commands via a crafted input. Impact is described as Command Inj...

CVE-2017-16067

CVE-2017-16067 corresponds to the npm malware incident involving the node-opencv package. The package is a malicious module that hijacks and exfiltrates environment variables; all versions have been unpublished from the npm registry. Connected advisories confirm malware characteristics and sugges...