CVE-2020-28446

Description

The package ntesseract before 0.2.9 is vulnerable to Command Injection via lib/tesseract.js.

Affected packages (1)

• npm/ntesseractfrom 0, < 0.2.9

CVSS scores

References (4)

• ADVISORYhttps://nvd.nist.gov/vuln/detail/CVE-2020-28446
• PATCHhttps://github.com/taoyuan/ntesseract
• WEBhttps://github.com/taoyuan/ntesseract/commit/fcbc36f381798b4362179c0cdf9961b437c7b619
• WEBhttps://security.snyk.io/vuln/SNYK-JS-NTESSERACT-1050982