Skip to content
OpenAdvisories

Vendor

zepspaiva

1 known vulnerabilities.

Products

doc-recog 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2026-110638

    doc-recog through 1.1.6 OS Command Injection via DocData._readPDF File Path

    doc-recog through 1.1.6 contains an OS command injection vulnerability that allows attackers to execute commands by supplying crafted document paths to recog() or tag(). Attackers can embed $(...) or backtick command substitution in the file path, which DocDa…

    zepspaiva doc-recog