9.8
Critical
CVE-2020-28446 The package ntesseract before 0.2.9 are vulnerable to Command Injection via lib/tesseract.js
Description
The package ntesseract before 0.2.9 are vulnerable to Command Injection via lib/tesseract.js.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| ntesseract 0.2 | earliest → < 0.2.9 | 0.2.9 |