LOW
GHSA-f698-m2v9-5fh3
Command Injection in opencv
Quick fix
GHSA-f698-m2v9-5fh3 — opencv: upgrade to the fixed version with the command below.
npm install opencv@6.1.0Details
Versions of `opencv`prior to 6.1.0 are vulnerable to Command Injection. The utils/ script find-opencv.js does not validate user input allowing attackers to execute arbitrary commands.
## Recommendation
Upgrade to version 6.1.0.
Are you affected?
Enter the version of the package you're using.