Be careful if you have automated OCR pipelines using Marker processing images you can’t be sure about. That and its dependency, surya-ocr are currently locked to Pillow <11 which has 3 critical, 8 high, and 4 moderate vulnerabilities. I’ve pulled it as an option from tetrak until I see that it’s picking up Pillow >=13.