huedawn-tesseract 0.3.3 and dawnsparks-node-tesseract 0.4.0 to 0.4.1 was discovered to contain a remote code execution (RCE) vulnerability via the child_process function.
CVSS 3.1CRITICAL 9.8·Network·No auth·No interaction·EPSS 0.02159·Published 2023-04-24·Fixed in 0.4.1CWE-94