What is GHSA-88qf-5f3v-pm6m?

GHSA-88qf-5f3v-pm6m is a security advisory published by GitHub Security Advisories with Critical severity. Remote code execution in dawnsparks-node-tesseract

Which CVE IDs does GHSA-88qf-5f3v-pm6m cover?

GHSA-88qf-5f3v-pm6m covers the following CVE IDs: CVE-2023-29566. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-88qf-5f3v-pm6m?

GHSA-88qf-5f3v-pm6m has a CVSS v3 base score of 9.8, published by GitHub Security Advisories.

Which products are affected by GHSA-88qf-5f3v-pm6m?

GHSA-88qf-5f3v-pm6m affects 1 product, including: npm/dawnsparks-node-tesseract:\u003c 0.4.1.

GHSA-88qf-5f3v-pm6mCriticalCVSS 9.8

Remote code execution in dawnsparks-node-tesseract

Vendor

GitHub Security Advisories

Published

April 24, 2023

Last Modified

November 11, 2023

🔗 CVE IDs covered (1)

CVE-2023-29566 →

📋 Description

dawnsparks-node-tesseract before 0.4.1 was discovered to contain a remote code execution (RCE) vulnerability via the child_process function.

🎯 Affected products1

npm/dawnsparks-node-tesseract:< 0.4.1

🔗 References (6)

https://nvd.nist.gov/vuln/detail/CVE-2023-29566
https://github.com/rona-dinihari/dawnsparks-node-tesseract/commit/81d1664f0b9fe521534acfae1d5b9c40127b36c1
https://github.com/omnitaint/Vulnerability-Reports/blob/ec3645003c7f8996459b5b24c722474adc2d599f/reports/dawnsparks-node-tesseract/report.md
https://github.com/rona-dinihari/dawnsparks-node-tesseract
https://www.npmjs.com/package/dawnsparks-node-tesseract
https://github.com/advisories/GHSA-88qf-5f3v-pm6m