Node-Tesseract (<= 0.2.7)

A vulnerability exists in desmondmorris node-tesseract up to 0.2.7 where the process function in lib/tesseract.js is susceptible to OS command injection via the image argument.