CVE-2025-63705
1 advisory.
npm/node-ts-ocr CVE-2025-63705: high 8.8, EPSS 1.19%
node-ts-ocr is vulnerable to OS Command Injection via the invokeImageOcr function in src/index.js
Action: No fix published. Pin and monitor.
Affected
No affected ranges in the source.
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-8jh2-3mw6-6pfm
- https://nvd.nist.gov/vuln/detail/CVE-2025-63705
- https://gist.github.com/6en6ar/a2ac44da0f4e580190be3e66cfbb9a4a
- https://github.com/nicolaspearson/node.ts.ocr
- https://www.npmjs.com/package/node-ts-ocr
CVE-2025-63705 · published · modified · JSON