Dbashford vulnerabilities
We track 1 vulnerability in Dbashford products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on March 25, 2026.
1vulnerabilities
1critical
0high
0exploited
9.8average CVSS score
Latest Dbashford vulnerabilities
- 9.8 Critical severity
Textract: Improper Neutralization of Special Elements used in an OS Command
textract through 2.5.0 is vulnerable to OS Command Injection via the file path parameter in multiple extractors. When processing files with malicious filenames, the filePath is passed directly to child_process.exec() in lib/extractors/doc.js, rtf.js, dxf.js, i