Node-opencv Project

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Node-opencv Project records in CISA KEV

No Node-opencv Project vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

2 records in Node-opencv · all components

TI-2019-07387 CVE-2019-10061 · GHSA-mc7w-4cjf-c973

MEDIUM 49

utils/find-opencv.js in node-opencv (aka OpenCV bindings for Node.js) prior to 6.1.0 is vulnerable to Command Injection.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.04239 Published 2019-03-26 Fixed in 6.1.0 CWE-78

TI-2017-11788 CVE-2017-16067 · GHSA-4x37-5rh2-hp8c

LOW 35

node-opencv was a malicious module published with the intent to hijack environment variables.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.01106 Published 2018-06-07 No fix listed CWE-506