github_osv/GHSA-f698-m2v9-5fh3
Command Injection in opencv
Versions of `opencv`prior to 6.1.0 are vulnerable to Command Injection. The utils/ script find-opencv.js does not validate user input allowing attackers to execute arbitrary commands.
## Recommendation
Upgrade to version 6.1.0.
gitlab/npm/opencv/GMS-2019-137
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in opencv.