A vulnerability marked as critical has been reported in node-ts-ocr 1.0.15. Impacted is the function
invokeImageOcr of the file src/index.js. The manipulation leads to os command injection.
This vulnerability is listed as CVE-2025-63705. The attack may be initiated remotely. There is no available exploit.
