cbcvebase.

Zapolnoch Tesseract Ocr vulnerabilities

1 known vulnerability affecting zapolnoch/tesseract_ocr.

Total CVEs
1
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
CRITICAL1

Vulnerabilities

Page 1 of 1
CVE-2026-26832P2CRITICALCVSS 9.8≤ 2.2.12026-03-25
CVE-2026-26832 [CRITICAL] CWE-78 CVE-2026-26832: node-tesseract-ocr is an npm package that provides a Node.js wrapper for Tesseract OCR. In all versi node-tesseract-ocr is an npm package that provides a Node.js wrapper for Tesseract OCR. In all versions through 2.2.1, the recognize() function in src/index.js is vulnerable to OS Command Injection. The file path parameter is concatenated into a shell command string and passed to child_process.exec() without proper sanitization
nvd
Zapolnoch Tesseract Ocr vulnerabilities | cvebase