Debian/node-opencv: critical 9.8
utils/find-opencv.js in node-opencv (aka OpenCV bindings for Node.js) prior to 6.1.0 is vulnerable to Command Injection. It does not validate user input allowing attackers to execute arbitrary command
Action: Upgrade node-opencv to 6.0.0+git20180416.cfc96ba0-3 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 6.0.0+git20180416.cfc96ba0-3 | - |
Fixed versions
| 6.0.0+git20180416.cfc96ba0-3 |
Sources
- osv: DEBIAN-CVE-2019-10061#Debian:14/node-opencv
- https://security-tracker.debian.org/tracker/CVE-2019-10061
published · modified · JSON