node-ts-ocr CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

HIGH node-ts-ocr CVE published 2026-05-07

CVE-2025-63705

CVE-2025-63705 is a high-severity vulnerability in the node-ts-ocr NPM package, caused by an OS Command Injection in the invokeImageOcr function in src/index.js. This vulnerability has a CVSS score of 8.8 and is classified as HIGH. Defenders responsible for managing NPM packages and ensuring the security of systems that use the node-ts-ocr package should be aware of this vulnerability and take necessary a [truncated]