Command Injection Vulnerability in Node-OpenCV by Peter Braden
CVE-2019-10061

9.8CRITICAL

Key Information:

Vendor: Node-opencv Project
Status: Node-opencv
Vendor: CVE Published:; 26 March 2019

🔔 Create Node-opencv Project Vulnerability Alert

What is CVE-2019-10061?

The utils/find-opencv.js file in the Node-OpenCV library prior to version 6.1.0 is susceptible to command injection due to improper validation of user input. This vulnerability allows malicious users to execute arbitrary commands on the host system, potentially leading to unauthorized access and control. Developers utilizing this library should immediately upgrade to version 6.1.0 or later to mitigate the risks associated with this vulnerability.