{"action":"Upgrade node-opencv to 6.0.0+git20180416.cfc96ba0-3 or later.","affected":[{"fixed":"6.0.0+git20180416.cfc96ba0-3","introduced":"0"}],"component":"node-opencv","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:14","exploited":false,"fixed_versions":["6.0.0+git20180416.cfc96ba0-3"],"id":"tcs_01M5NDKRS01GQBVRGDVCSHVSTF","modified_at":"2026-09-21T07:00:07.600228476Z","published_at":"2019-03-26T01:29:00.710Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2019-10061","https://security-tracker.debian.org/tracker/CVE-2019-10061"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2019-10061#Debian:14/node-opencv","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2019-10061"}],"summary":"utils/find-opencv.js in node-opencv (aka OpenCV bindings for Node.js) prior to 6.1.0 is vulnerable to Command Injection. It does not validate user input allowing attackers to execute arbitrary command"}