| Package | Affected versions | Patched versions |
|---|---|---|
| node-opencv | < 6.1.0 | 6.1.0 |
| opencv | < 6.1.0 | 6.1.0 |
utils/find-opencv.js in node-opencv (aka OpenCV bindings for Node.js) prior to 6.1.0 is vulnerable to Command Injection. It does not validate user input allowing attackers to execute arbitrary commands.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free