Описание
Insecure Default Configuration in tesseract.js
Versions of tesseract.js prior to 1.0.19 default to using a third-party proxy. Requests may be proxied through crossorigin.me which clearly states is not suitable for production use. This may lead to instability and privacy violations.
Recommendation
Upgrade to version 1.0.19 or later.
Пакеты
Наименование
tesseract.js
npm
Затронутые версииВерсия исправления
< 1.0.19
1.0.19
5.9 Medium
CVSS3
Дефекты
CWE-829
5.9 Medium
CVSS3
Дефекты
CWE-829