github_osv/GHSA-83rx-c8cr-6j8q
Insecure Default Configuration in tesseract.js
Versions of `tesseract.js` prior to 1.0.19 default to using a third-party proxy. Requests may be proxied through `crossorigin.me` which clearly states is not suitable for production use. This may lead to instability and privacy violations.
## Recommendation
Upgrade to version 1.0.19 or later.
gitlab/npm/tesseract.js/GMS-2019-60
Insecure Default Configuration in tesseract.js
Versions of `tesseract.js` default to using a third-party proxy. Requests may be proxied through `crossorigin.me` which clearly states is not suitable for production use. This may lead to instability and privacy violations. Upgrade to or later.