~ / search / GHSA-2689-cw26-6cpj

GHSA-2689-cw26-6cpj

Whoogle allows attackers to execute arbitrary code via supplying a crafted search query

Source: GitHub Advisory Database (reviewed) High CVE-2024-53305

Packages

EcosystemPackageAffectedFixed in
PyPI whoogle-search < 0.9.1 0.9.1

Details

As written in the advisory (Markdown source, shown as plain text).

An issue in the component /models/config.py of Whoogle search v0.9.0 allows attackers to execute arbitrary code via supplying a crafted search query.

References

External links from the advisory. They lead to third-party sites.