Skip to main content
cve.nowby Sazabi
← npm
npmPackage

node-tesseract-ocr

1 known vulnerability (1 critical), with the versions each affects and the releases that fix them.

Latest release
2.2.1 (May 11, 2021): affected by CVE-2026-26832
Newest unaffected release
Every release is affected by at least one advisory
Advisories
1 · 1 critical
Weekly downloads
53.9K
Dependents
94
Releases
7 since 0.1.0 (Oct 9, 2018)
Registry
npm
Releases read
Nov 8, 2026

Version timeline

Every release cve.now has on record, lowest version on the left; each bar is a run of versions an advisory affects.

Advisories 1

  • CVE-2026-26832Critical 9.8

    node-tesseract-ocr is an npm package that provides a Node.js wrapper for Tesseract OCR.

    Affected: through 2.2.1.

    No fix released. The latest release, 2.2.1, is still affected.

    100% of node-tesseract-ocr downloads last week were affected versions (54.4K).