Command injection - Githubissues

zapolnoch / node-tesseract-ocr

A Node.js wrapper for the Tesseract OCR API

MIT License

304 stars 38 forks source link

Open J-295 opened 2 years ago

J-295 commented 2 years ago

If :";echo TEST;": is passed into tesseract.recognize then TEST is printed to the terminal (On Linux, I have not tested this on windows)

Lambdac0re commented 2 years ago

Horrifying