CVE-2026-110638 - doc-recog through 1.1.6 OS Command Injection via DocData._readPDF File Path
CVE ID :CVE-2026-110638 Published : Oct. 14, 2026, 3:17 p.m. | 15 minutes ago Description :doc-recog through 1.1.6 contains an OS command injection vulnerability that allows attackers to execute commands by supplying crafted document paths to recog() or tag(). Attackers can embed $(...) or...