Cpe:2.3:a:ppt2png_project:ppt2png:*:*:*:*:*:node.js:*:*

The ppt2png npm package (version 0.0.6 and earlier) is vulnerable to OS command injection via unsanitized file path arguments passed to child_process.exec(), enabling arbitrary code execution.