PyPI/whoogle-search CVE-2024-53305: high 7.3, EPSS 0.59%
Whoogle allows attackers to execute arbitrary code via supplying a crafted search query
Action: Upgrade whoogle-search to 0.9.1 or later.
pip install whoogle-search==0.9.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.9.1 | - |
Fixed versions
| 0.9.1 |
Sources
- osv: GHSA-2689-cw26-6cpj
- nvd: CVE-2024-53305
- https://github.com/benbusby/whoogle-search/commit/223f00c3c0533423114f99b30c561278bc0b42ba
- https://fern89.github.io/posts/whoogle-rce
- https://gist.github.com/fern89/ca5fe76ad81b4bc363e7341e523a1651
- https://github.com/benbusby/whoogle-search
CVE-2024-53305 · published · modified · JSON