CVE:CVE-2023-29566
CNNVD:CNNVD-202304-1939
tesseract是一款开源的OCR（光学字符识别）引擎。
huedawn-tesseract 0.3.3版本、dawnsparks-node-tesseract 0.4.0版本至0.4.1版本存在安全漏洞，该漏洞源于通过child_process函数发现包含远程代码执行(RCE)漏洞。
solution:Upgrade dawnsparks-node-tesseract_project dawnsparks-node-tesseract to a higher version than 0.4.0,0.4.1,and avoid the version 0.4.0,0.4.1; Upgrade huedawn-tesseract_project huedawn-tesseract to a higher version than 0.3.0,and avoid the version 0.3.0