node-tesseract vulnerabilities

CVEs whose affected-version data names the node-tesseract package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-117511High· 7.3

1w ago

desmondmorris node-tesseract Command Builder tesseract.js process os command injection

A vulnerability has been found in desmondmorris node-tesseract up to 0.2.7. Affected by this issue is the function process of the file lib/tesseract.js of the component Command Builder. Such manipulation of the argument image leads to os…

▾ Twilightdesmondmorris · node-tesseractvia CVEORG