Improper Link Resolution Before File Access ('Link Following')
ocrodjvu 0.4.6-1 on Debian GNU/Linux allows local users to modify arbitrary files via a symlink attack on temporary files that are generated when Cuneiform is invoked as the OCR engine.
Advisories for Pypi/Ocrodjvu package
2022