Skip to content
OpenAdvisories

Package · npm

opencv

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • Low —
    GHSA-f698-m2v9-5fh3

    Command Injection in opencv

    Versions of `opencv`prior to 6.1.0 are vulnerable to Command Injection. The utils/ script find-opencv.js does not validate user input allowing attackers to execute arbitrary commands. ## Recommendation Upgrade to version 6.1.0.

    opencv npm
  • Critical 9.8
    CVE-2019-10061

    OS Command Injection in node-opencv

    utils/find-opencv.js in node-opencv (aka OpenCV bindings for Node.js) prior to 6.1.0 is vulnerable to Command Injection. It does not validate user input allowing attackers to execute arbitrary commands.

    opencv node-opencv Debian npm