CVE-2023-29566: Dawnsparks-Node-Tesseract Project Dawnsparks-Node-Tesseract

Critical severity, CVSS 9.8. EPSS: 2.2% chance of exploitation in the next 30 days.

huedawn-tesseract 0.3.3 and dawnsparks-node-tesseract 0.4.0 to 0.4.1 was discovered to contain a remote code execution (RCE) vulnerability via the child_process function.

Affected products

• Dawnsparks-Node-Tesseract Project Dawnsparks-Node-Tesseract: version 0.4.0 only; version 0.4.1 only
• Huedawn-Tesseract Project Huedawn-Tesseract: version 0.3.0 only

Published 2023-04-24. Last modified 2026-06-17.