Cpe:2.3:a:desmondmorris:node_tesseract:*:*:*:*:*:*:*:*

A vulnerability exists in desmondmorris node-tesseract up to 0.2.7 where the process function in lib/tesseract.js is susceptible to OS command injection via the image argument.