CVE-2020-28446: Ntesseract Project Ntesseract

Critical severity, CVSS 9.8. EPSS: 3.4% chance of exploitation in the next 30 days.

The package ntesseract before 0.2.9 are vulnerable to Command Injection via lib/tesseract.js.

Affected products

• Ntesseract Project Ntesseract: before 0.2.9 (fixed in 0.2.9)

Published 2022-07-25. Last modified 2026-06-17.