peterbraden/node-opencv

peterbraden/node-opencv

GitHubGitHub
GitHubgithub.com
Releases4
Frequency11 months 5 hours
Last Release
Stars4.39K
OpenCV Bindings for node.js
Log in to subscribe

CVE History

CVEAffectedPublishedCVSS v3CVSS v2
CVE-2019-10061NVD↗
< 6.1.0—7.5 HIGH

utils/find-opencv.js in node-opencv (aka OpenCV bindings for Node.js) prior to 6.1.0 is vulnerable to Command Injection. It does not validate user input allowing attackers to execute arbitrary commands.

CVE-2017-16067NVD↗
all versions—5 MEDIUM

node-opencv was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm.