Description
This affects all versions of package npos-tesseract. The injection point is located in line 55 in lib/ocr.js.
Remediation
References
https://security.snyk.io/vuln/SNYK-JS-NPOSTESSERACT-1051031
Related Vulnerabilities
CVE-2022-39350 Vulnerability in npm package @dependencytrack/frontend
CVE-2023-37899 Vulnerability in npm package @feathersjs/socketio
CVE-2022-45689 Vulnerability in maven package cn.hutool:hutool-json
CVE-2022-24289 Vulnerability in maven package org.apache.cayenne:cayenne-server
CVE-2022-29648 Vulnerability in maven package com.jflyfox:jflyfox_jfinal